Skip to content

Update dependencies to Twig 2.7.3 to avoid security check red warning #959

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 1 commit into from

Conversation

matks
Copy link

@matks matks commented Mar 22, 2019

If you install Symfony Demo now, you'll get the security check warning:

Executing script security-checker security:check [KO]
 [KO]
Script security-checker security:check returned with error code 1
!!  Symfony Security Check Report
!!  =============================
!!
!!  1 packages have known vulnerabilities.
!!
!!  twig/twig (v2.6.2)
!!  ------------------
!!
!!   * [CVE-NONE-0001][]: Sandbox Information Disclosure
!!
!!  [CVE-NONE-0001]: https://symfony.com/blog/twig-sandbox-information-disclosure
!!
!!  Note that this checker can only detect vulnerabilities that are referenced in the SensioLabs security advisories database.
!!  Execute this command regularly to check the newly discovered vulnerabilities.
!!
Script @auto-scripts was called via post-install-cmd

Consequently twig needs to be updated to v2.7.3 in order to remove this warning (and avoid scaring people away 😄)

@matks
Copy link
Author

matks commented Mar 25, 2019

I see this update is also shipped by #955 so I close this PR

@matks matks closed this Mar 25, 2019
@matks matks deleted the update-twig-v138 branch March 25, 2019 08:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant