Medium
CVE-2026-62993
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 18
Reset filters
Medium
CVE-2026-62996
Smarty Security stream restriction bypass through stream: resource
Medium
CVE-2026-62992
Smarty: Symlink path traversal out of trusted directories
High
CVE-2024-35226
Smarty vulnerable to PHP Code Injection by malicious attribute in extends-tag
High
CVE-2023-28447
smarty Cross-site Scripting vulnerability in Javascript escaping
Medium
CVE-2018-25047
Smarty Cross-site Scripting vulnerability in pages that use smarty_function_mailto
High
CVE-2022-29221
PHP Code Injection by malicious block or filename in Smarty
Medium
CVE-2012-4437
Cross-site Scripting in SmartyException
High
CVE-2014-8350
Smarty arbitrary PHP code execution
Critical
CVE-2017-1000480
Smarty PHP code injection
Medium
CVE-2018-16831
Smarty Path Traversal Vulnerability
High
CVE-2018-13982
Smarty Path Traversal Vulnerability
Medium
CVE-2009-5054
Smarty Does Not Consider Umask Values When Setting Permissions
Critical
CVE-2011-1028
Smarty3 Arbitrary PHP Code Execution
High
CVE-2021-21408
Access to restricted PHP code by dynamic static class access in smarty
High
CVE-2021-29454
Sandbox Escape by math function in smarty
High
CVE-2021-26119
Sandbox escape through template_object in smarty
Critical
CVE-2021-26120
PHP Code Injection by malicious function name in smarty
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.