StackRadarChart IndexLive demo

CVE-2026-47730

Low

Advisory

Published 5 Jun 2026In the index since 6 Sept 2026

Severity: Low; worst across findings
CVSS: 2.0; base score, highest
EPSS: 0.003; 22nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 44; of 17,781 indexed, latest versions
Container images: 27; deployed by those charts
Fix available: 1 of 1; affected package

Twig: XSS in profiler HtmlDumper via unescaped template and profile names

Carried by container images the latest versions of 44 of 17,781 indexed charts deploy, on 27 images.

Affected package	Affected versions	Fixed in	Images
twig/twigcomposer	v3.3.3, v3.3.7, v3.3.8, v3.3.10+9 more	3.26.0	27

OSV records: GHSA-2g2g-8p8h-fgwm

Charts affected

44 by stars

Chart

Latest

Affected images

Radar Score

mauticone-acre-fund

1 of 3 See more

mautic one-acre-fund 0.1.7

1 of the 3 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
mautic/mautic :v4-apache	94ea4acf4049	twig/twig@v3.8.0	3.26.0

Open the chart page →

2,667

phpmyadminalekc

1 of 1 See more

phpmyadmin alekc 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
library/phpmyadmin :5.2.3-apache	3a8a8d6b5289	twig/twig@v3.11.3	3.26.0

Open the chart page →

2,582

glpiglpi-conteiner

2 of 3 See more

glpi glpi-conteiner 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
library/phpmyadmin :latest	3a8a8d6b5289	twig/twig@v3.11.3	3.26.0
vdiogov/glpi-conteiner :latest	6945f84f0058	twig/twig@v3.8.0	3.26.0

Open the chart page →

12,170

phpmyadminphpmyadmin

1 of 1 See more

phpmyadmin phpmyadmin 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
library/phpmyadmin :5.2.3-apache	3a8a8d6b5289	twig/twig@v3.11.3	3.26.0

Open the chart page →

2,582

repmanszpadel-charts

1 of 3 See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
buddy/repman :1.4.0	097c897f8b54	twig/twig@v3.3.7	3.26.0

Open the chart page →

7,052

commonground-gatewaycommonground-gateway

1 of 7 See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	twig/twig@v3.4.3	3.26.0

Open the chart page →

9,724

contactcataloguscontact-catalogus

1 of 3 See more

contactcatalogus contact-catalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/contactcatalogus-php :latest	eeb625bd660c	twig/twig@v3.3.10	3.26.0

Open the chart page →

7,303

firefly-iiigeek-cookbook

1 of 1 See more

firefly-iii geek-cookbook 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
fireflyiii/core :version-5.6.14	2f4283bd0cf7	twig/twig@v3.3.8	3.26.0

Open the chart page →

2,076

opencatalogiopencatalogi

1 of 8 See more

opencatalogi opencatalogi 1.0.6

1 of the 8 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	twig/twig@v3.4.3	3.26.0

Open the chart page →

14,838

repmanrepman-helmchart

1 of 3 See more

repman repman-helmchart 1.0.12

1 of the 3 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
buddy/repman :1.4.0	097c897f8b54	twig/twig@v3.3.7	3.26.0

Open the chart page →

3,596

baikalrubxkube

1 of 1 See more

baikal rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
ckulka/baikal :0.10.1-nginx	434bdd162247	twig/twig@v3.14.2	3.26.0

Open the chart page →

5,315

user-componentuser-component

1 of 4 See more

user-component user-component 1.2.0

1 of the 4 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/user-component-php :latest	198db44fabb5	twig/twig@v3.3.8	3.26.0

Open the chart page →

7,303

redirectwyrihaximusnet

1 of 1 See more

redirect wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
ghcr.io/wyrihaximusnet/redirect :random	bf5983d754d7	twig/twig@v3.14.0	3.26.0

Open the chart page →

1,581

berichtserviceberichtservice

1 of 3 See more

berichtservice berichtservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/berichtservice-php :latest	ee6a21e66ff0	twig/twig@v3.3.10	3.26.0

Open the chart page →

7,342

chart-dnazarenochart-dnazareno

1 of 3 See more

chart-dnazareno chart-dnazareno 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
library/phpmyadmin :5.2.1	6e75aa8f767c	twig/twig@v3.5.0	3.26.0

Open the chart page →

5,778

commonground-gatewaycommonground-gateway-frontend

1 of 4 See more

commonground-gateway commonground-gateway-frontend 0.1.5

1 of the 4 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	twig/twig@v3.4.3	3.26.0

Open the chart page →

2,825

apachedevops

1 of 4 See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
phpmyadmin/phpmyadmin :5.2.0	ae6dadd9cf3c	twig/twig@v3.3.10	3.26.0

Open the chart page →

30,031

1 of 4 See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
phpmyadmin/phpmyadmin :5.2.0	ae6dadd9cf3c	twig/twig@v3.3.10	3.26.0

Open the chart page →

29,033

wordpressdevops

1 of 4 See more

wordpress devops 0.12.0

1 of the 4 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
phpmyadmin/phpmyadmin :5.2.0	ae6dadd9cf3c	twig/twig@v3.3.10	3.26.0

Open the chart page →

12,992

eav-componenteav-component

1 of 3 See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/eav-component-php :latest	24bbca4a52a8	twig/twig@v3.4.1	3.26.0

Open the chart page →

7,255

education-componenteducation-component

1 of 3 See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/education-component-php :latest	da6b05a1a601	twig/twig@v3.3.10	3.26.0

Open the chart page →

7,327

supportpalevilgn0me

1 of 1 See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	twig/twig@v3.3.10	3.26.0

Open the chart page →

20,933

firefly-iiifirefly-iii

1 of 1 See more

firefly-iii firefly-iii 1.10.1

1 of the 1 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
fireflyiii/core :version-6.5.9	fe4ecec4c2ba	twig/twig@v3.24.0	3.26.0

Open the chart page →

5,039

firefly-iii-stackfirefly-iii

1 of 4 See more

firefly-iii-stack firefly-iii 0.10.2

1 of the 4 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
fireflyiii/core :version-6.5.9	fe4ecec4c2ba	twig/twig@v3.24.0	3.26.0

Open the chart page →

10,260

flask-contactsfirst-idror-chart

1 of 3 See more

flask-contacts first-idror-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
library/phpmyadmin :latest	3a8a8d6b5289	twig/twig@v3.11.3	3.26.0

Open the chart page →

5,704

flask-contactsflask-contacts-generic

1 of 3 See more

flask-contacts flask-contacts-generic 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
library/phpmyadmin :latest	3a8a8d6b5289	twig/twig@v3.11.3	3.26.0

Open the chart page →

5,704

openemrgeek-cookbook

1 of 1 See more

openemr geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
openemr/openemr :6.1.0	89eaa6d9a4e3	twig/twig@v3.3.8	3.26.0

Open the chart page →

8,392

glpiglpi-chart

2 of 3 See more

glpi glpi-chart 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
library/phpmyadmin :latest	3a8a8d6b5289	twig/twig@v3.11.3	3.26.0
vdiogov/glpi-conteiner :latest	6945f84f0058	twig/twig@v3.8.0	3.26.0

Open the chart page →

12,170

phpmyadminhelmforge

1 of 1 See more

phpmyadmin helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
phpmyadmin/phpmyadmin :5.2.3	42a200db07b4	twig/twig@v3.11.3	3.26.0

Open the chart page →

4,751

wallabaghelmforge

1 of 3 See more

wallabag helmforge 1.3.6

1 of the 3 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
wallabag/wallabag :2.6.14	4a527e027e0d	twig/twig@v3.11.3	3.26.0

Open the chart page →

2,762

1 of 1 See more

wallabag hp 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
wallabag/wallabag :2.6.14	4a527e027e0d	twig/twig@v3.11.3	3.26.0

Open the chart page →

1,136

docker-mailservermailserver

1 of 9 See more

docker-mailserver mailserver 0.2.65

1 of the 9 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
jeboehm/mailserver-web :5.0.92	9da13edf5aa8	twig/twig@v3.21.1	3.26.0

Open the chart page →

10,897

medewerkercatalogusmedewerkercatalogus

1 of 3 See more

medewerkercatalogus medewerkercatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/medewerkercatalogus-php :latest	1ea5412bed26	twig/twig@v3.3.10	3.26.0

Open the chart page →

7,327

fossologymidokura-community

1 of 2 See more

fossology midokura-community 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
fossology/fossology :4.2.1	8bd1f22ba7bb	twig/twig@v3.4.3	3.26.0

Open the chart page →

3,294

commonground-gatewayopencatalogi

1 of 7 See more

commonground-gateway opencatalogi 1.5.3

1 of the 7 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	twig/twig@v3.4.3	3.26.0

Open the chart page →

9,724

firefly-iiiphntom

1 of 2 See more

firefly-iii phntom 0.2.10

1 of the 2 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
phntom/fireflyiii :version-5.7.5	f881ea5fbbf1	twig/twig@v3.3.10	3.26.0

Open the chart page →

1,813

1 of 6 See more

shopware robjuz 2.0.0

1 of the 6 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
shyim/shopware :6.4.6.0	a951c0e6b836	twig/twig@v3.3.3	3.26.0

Open the chart page →

2,972

phpmyadminsb-helm-charts

1 of 1 See more

phpmyadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
library/phpmyadmin :5.2.1	6e75aa8f767c	twig/twig@v3.5.0	3.26.0

Open the chart page →

5,315

wallabagsebtiz13-charts

1 of 1 See more

wallabag sebtiz13-charts 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
wallabag/wallabag :2.6.14	4a527e027e0d	twig/twig@v3.11.3	3.26.0

Open the chart page →

1,136

commonground-gatewayskeleton-pip

1 of 5 See more

commonground-gateway skeleton-pip 0.1.7

1 of the 5 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	twig/twig@v3.4.3	3.26.0

Open the chart page →

2,825

repmanteam-blue

1 of 5 See more

repman team-blue 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
buddy/repman :1.4.0	097c897f8b54	twig/twig@v3.3.7	3.26.0

Open the chart page →

3,993

flask-contactstest-configmap

1 of 3 See more

flask-contacts test-configmap 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
library/phpmyadmin :latest	3a8a8d6b5289	twig/twig@v3.11.3	3.26.0

Open the chart page →

5,704

webresourcecataloguswebresourcecatalogus

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	twig/twig@v3.3.10	3.26.0

Open the chart page →

7,552

default-backendwyrihaximusnet

1 of 1 See more

default-backend wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-47730.

Container image	Digest	Package	Fixed in
ghcr.io/wyrihaximusnet/default-backend :random	b24e63efd841	twig/twig@v3.3.3	3.26.0

Open the chart page →

2,534

Container images carrying it

27 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
library/phpmyadmin :5.2.3-apache :latest	3a8a8d6b5289	twig/twig@v3.11.3	3.26.0	7
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	twig/twig@v3.4.3	3.26.0	5
buddy/repman :1.4.0	097c897f8b54	twig/twig@v3.3.7	3.26.0	3
phpmyadmin/phpmyadmin :5.2.0	ae6dadd9cf3c	twig/twig@v3.3.10	3.26.0	3
wallabag/wallabag :2.6.14	4a527e027e0d	twig/twig@v3.11.3	3.26.0	3
fireflyiii/core :version-6.5.9	fe4ecec4c2ba	twig/twig@v3.24.0	3.26.0	2
library/phpmyadmin :5.2.1	6e75aa8f767c	twig/twig@v3.5.0	3.26.0	2
vdiogov/glpi-conteiner :latest	6945f84f0058	twig/twig@v3.8.0	3.26.0	2
ckulka/baikal :0.10.1-nginx	434bdd162247	twig/twig@v3.14.2	3.26.0	1
fireflyiii/core :version-5.6.14	2f4283bd0cf7	twig/twig@v3.3.8	3.26.0	1
fossology/fossology :4.2.1	8bd1f22ba7bb	twig/twig@v3.4.3	3.26.0	1
jeboehm/mailserver-web :5.0.92	9da13edf5aa8	twig/twig@v3.21.1	3.26.0	1
mautic/mautic :v4-apache	94ea4acf4049	twig/twig@v3.8.0	3.26.0	1
openemr/openemr :6.1.0	89eaa6d9a4e3	twig/twig@v3.3.8	3.26.0	1
phntom/fireflyiii :version-5.7.5	f881ea5fbbf1	twig/twig@v3.3.10	3.26.0	1
phpmyadmin/phpmyadmin :5.2.3	42a200db07b4	twig/twig@v3.11.3	3.26.0	1
shyim/shopware :6.4.6.0	a951c0e6b836	twig/twig@v3.3.3	3.26.0	1
ghcr.io/conductionnl/berichtservice-php :latest	ee6a21e66ff0	twig/twig@v3.3.10	3.26.0	1
ghcr.io/conductionnl/contactcatalogus-php :latest	eeb625bd660c	twig/twig@v3.3.10	3.26.0	1
ghcr.io/conductionnl/eav-component-php :latest	24bbca4a52a8	twig/twig@v3.4.1	3.26.0	1
ghcr.io/conductionnl/education-component-php :latest	da6b05a1a601	twig/twig@v3.3.10	3.26.0	1
ghcr.io/conductionnl/medewerkercatalogus-php :latest	1ea5412bed26	twig/twig@v3.3.10	3.26.0	1
ghcr.io/conductionnl/user-component-php :latest	198db44fabb5	twig/twig@v3.3.8	3.26.0	1
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	twig/twig@v3.3.10	3.26.0	1
ghcr.io/wyrihaximusnet/default-backend :random	b24e63efd841	twig/twig@v3.3.3	3.26.0	1
ghcr.io/wyrihaximusnet/redirect :random	bf5983d754d7	twig/twig@v3.14.0	3.26.0	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	twig/twig@v3.3.10	3.26.0	1