cross-site scripting in twig/twig (CVE-2026-47730). Risk of unauthorized operations or information disclosure. Exploitable via ``ArrayLoader``. Mitigation: upgrade to `3.26.0` or later.
vulnerability in bugsink (CVE-2026-53954). Risk of unauthorized operations or information disclosure. Exploitable via ``MAX_EVENT_TAGS``. Mitigation: upgrade to `2.2.2` or later.