How many CVEs have patched compile?

4 published CVEs changed compile in smarty-php/smarty, in 5 distinct patches totalling 47 changed lines, between 2019 and 2024.

What is the latest CVE that changed compile?

CVE-2024-35226 (Smarty vulnerable to PHP Code Injection by malicious attribute in extends-tag), published 2024-05-28, changed lines 67 of src/Compile/Tag/ExtendsTag.php.

How does compile compare to the rest of smarty-php/smarty?

smarty-php/smarty has 14 CVEs with a located fix in total; 4 of them changed compile.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

RadicalNotion.AI

Log in Create an account

smarty-php/smarty

Function

4 files

compile

Name: compile in smarty-php/smarty: CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Defined in 4 files

Last patched May 28, 2024

4

CVEs

That changed this function

5

Distinct patches

Backports counted once

47

Lines changed

Added plus removed

2019–2024

Years

By CVE publication date

Overview

compile in smarty-php/smarty was changed by 4 published CVE fixes between 2019 and 2024, in 5 distinct patches that added or removed 47 lines in total.

The name occurs in 4 files: libs/sysplugins/smarty_internal_compile_function.php, libs/sysplugins/smarty_internal_compile_block.php, libs/sysplugins/smarty_internal_compile_private_special_variable.php, src/Compile/Tag/ExtendsTag.php.

smarty-php/smarty has 14 CVEs with a located fix in total, so 29% of them touched this function.

CVEs that patched it

Every published CVE whose fix changed compile, newest first, with the lines each fix touched.

Smarty vulnerable to PHP Code Injection by malicious attribute in extends-tag
CVE-2024-35226 · src/Compile/Tag/ExtendsTag.php · line 67 · +1 −23
High · CVSS 7.3
EPSS 0.5%2024-05-28
PHP Code Injection by malicious block or filename in Smarty
CVE-2022-29221 · libs/sysplugins/smarty_internal_compile_block.php · lines 128–158 · +2 −2 in 2 hunks
High · CVSS 8.8
EPSS 4.9%2022-05-24
PHP Code Injection by malicious block or filename in Smarty
CVE-2022-29221 · libs/sysplugins/smarty_internal_compile_function.php · lines 137–199 · +4 −4 in 4 hunks
High · CVSS 8.8
EPSS 4.9%2022-05-24
PHP Code Injection by malicious function name in smarty
CVE-2021-26120 · libs/sysplugins/smarty_internal_compile_function.php · lines 61–65 · +5 −0
Critical · CVSS 9.8
EPSS 82.3%2021-02-22
Smarty3 Arbitrary PHP Code Execution
CVE-2011-1028 · libs/sysplugins/smarty_internal_compile_private_special_variable.php · lines 59–62 · +2 −4
Critical · CVSS 9.8
EPSS 1.6%2019-11-20

Get an alert when the next CVE fix lands in smarty-php/smarty, with the patched functions.

Monitor smarty CVEs

Other functions in these files

Functions in the same files that CVE fixes also changed.

1compileIncludesrc/Compile/Tag/ExtendsTag.php1 CVEs · 1 patches2024

Other hotspots in the repository

Functions in smarty-php/smarty changed by the most CVE fixes.

_checkDir4 CVEs · libs/sysplugins/smarty_security.php _realpath2 CVEs · libs/Smarty.class.php smarty_function_html_select_date2 CVEs · libs/plugins/function.html_select_date.php smarty_function_fetch2 CVEs · libs/plugins/function.fetch.php smarty_function_html_image2 CVEs · libs/plugins/function.html_image.php isTrustedResourceDir2 CVEs · libs/sysplugins/smarty_security.php

All patched functions in smarty-php/smarty

Frequently asked questions

Common questions about CVE fixes to compile.

How many CVEs have patched compile?: 4 published CVEs changed compile in smarty-php/smarty, in 5 distinct patches totalling 47 changed lines, between 2019 and 2024.
What is the latest CVE that changed compile?: CVE-2024-35226 (Smarty vulnerable to PHP Code Injection by malicious attribute in extends-tag), published 2024-05-28, changed lines 67 of src/Compile/Tag/ExtendsTag.php.
How does compile compare to the rest of smarty-php/smarty?: smarty-php/smarty has 14 CVEs with a located fix in total; 4 of them changed compile.
What do the line numbers refer to?: Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track smarty-php/smarty CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing