twill is vulnerable to Cross-Site Request Forgery (CSRF)

MEDIO 4.3CVE-2021-3932 · GHSA-f99g-pg48-wrfc · Published 13/11/2021 · updated 17/06/2026

In breve

CVE-2021-3932 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda area17/twill, twill (area17).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.41%, superiore al 35.1% delle vulnerabilità.
Correzione: aggiornare a 2.5.3, 1.2.5 o successiva.

Package	Affected versions	Patched versions
area17/twill Packagist	`≥ 2.0.0, < 2.5.3< 1.2.5`	`2.5.31.2.5`
twill area17	`≤ 2.5.2`	No fix yet

twill is vulnerable to Cross-Site Request Forgery (CSRF).

NVD description

twill is vulnerable to Cross-Site Request Forgery (CSRF)

Running one of these products? Scan your site to see whether it exposes a vulnerable version.