-
-
Notifications
You must be signed in to change notification settings - Fork 9.7k
Closed
Description
Symfony version(s) affected
5.4.12
Description
When I run the command:
composer audit --format=table
The result contains a table where the final pipe character at the URL's second line does not align properly:
+-------------------+----------------------------------------------------------------------------------+
| Package | twig/twig |
| CVE | CVE-2022-39261 |
| Title | Possibility to load a template outside a configured directory when using the fil |
| | esystem loader |
| URL | https://symfony.com/blog/twig-security-release-possibility-to-load-a-template-ou |
| | tside-a-configured-directory-when-using-the-filesystem-loader |
| Affected versions | >=1.0.0,<1.44.7|>=2.0.0,<2.15.3|>=3.0.0,<3.4.3 |
| Reported at | 2022-09-28T10:36:08+00:00 |
+-------------------+----------------------------------------------------------------------------------+
How to reproduce
Install a e.g. twig/twig v3.4.2
which has a known long URL in it's CVE and run composer audit
. Note the part ...using-the-filesystem-loader |
where the pipe does not position itself correctly with the other right-aligned pipes.
Possible Solution
Unknown
Additional Context
Originally reported at composer/composer#11087