HighFix available
smarty3, smarty4 — security advisory
Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. In affected versions template authors could inject php code by choosing a malicious file name for an extends-tag. Sites that cannot fully trust template authors should update asap. All users are advised to update. There is no patch for users on the v3 branch. There are no known workarounds for this vulnerability.
- Products
- smarty3, smarty4
- Affected versions
- 3.1.21-1, 3.1.21-1ubuntu1, 3.1.21-1ubuntu1+esm1, 3.1.21-1ubuntu1+esm2, 3.1.31+20161214.1.c7d42e4+selfpack1-2, 3.1.31+20161214.1.c7d42e4+selfpack1-3, 3.1.31+20161214.1.c7d42e4+selfpack1-3ubuntu0.1, 3.1.33+20180830.1.3a78a21f+selfpack1-1, 3.1.34+20190228.1.c9f0de05+selfpack1-1, 3.1.39-2, 3.1.39-2ubuntu1, 3.1.39-2ubuntu1.22.04.1, 3.1.48-1, 3.1.48-2, 3.1.48-2build1, 4.3.1-1
- Fixed versions
- 3.1.31+20161214.1.c7d42e4+selfpack1-3ubuntu0.1+esm1, 3.1.34+20190228.1.c9f0de05+selfpack1-1ubuntu0.1, 3.1.39-2ubuntu1.22.04.2, 3.1.48-1ubuntu0.24.04.1, 4.3.1-1ubuntu0.24.04.1
- CVEs
- CVE-2024-35226
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 01:13 UTC · Revision 1
Source evidence
Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. In affected versions template authors could inject php code by choosing a malicious file name for an extends-tag. Sites that cannot fully trust template authors should update asap. All users are advised to update. There is no patch for users on the v3 branch. There are no known workarounds for this vulnerability.
osv:UBUNTU-CVE-2024-35226
smarty3
Fixed versions: Not specified
smarty3
Fixed versions: 3.1.31+20161214.1.c7d42e4+selfpack1-3ubuntu0.1+esm1
smarty3
Fixed versions: 3.1.34+20190228.1.c9f0de05+selfpack1-1ubuntu0.1
smarty3
Fixed versions: 3.1.39-2ubuntu1.22.04.2
smarty3
Fixed versions: 3.1.48-1ubuntu0.24.04.1
smarty4
Fixed versions: 4.3.1-1ubuntu0.24.04.1
smarty3
Fixed versions: Not specified
smarty3
Fixed versions: Not specified
smarty3
Fixed versions: Not specified
Complete source record
{
"id": "8945732f1b06e26e6605f93d68aeabdafde777deec1eada3e6de48817d4b6e5c",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2024-35226",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2024-35226",
"summary": "Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. In affected versions template authors could inject php code by choosing a malicious file name for an extends-tag. Sites that cannot fully trust template authors should update asap. All users are advised to update. There is no patch for users on the v3 branch. There are no known workarounds for this vulnerability.",
"evidence": "osv:UBUNTU-CVE-2024-35226",
"products": [
{
"name": {
"value": "smarty3",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.1.21-1",
"evidence": "/affected/0/versions"
},
{
"value": "3.1.21-1ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "3.1.21-1ubuntu1+esm1",
"evidence": "/affected/0/versions"
},
{
"value": "3.1.21-1ubuntu1+esm2",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "smarty3",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.1.31+20161214.1.c7d42e4+selfpack1-3ubuntu0.1+esm1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": [
{
"value": "3.1.31+20161214.1.c7d42e4+selfpack1-2",
"evidence": "/affected/1/versions"
},
{
"value": "3.1.31+20161214.1.c7d42e4+selfpack1-3",
"evidence": "/affected/1/versions"
},
{
"value": "3.1.31+20161214.1.c7d42e4+selfpack1-3ubuntu0.1",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "smarty3",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.1.34+20190228.1.c9f0de05+selfpack1-1ubuntu0.1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": [
{
"value": "3.1.33+20180830.1.3a78a21f+selfpack1-1",
"evidence": "/affected/2/versions"
},
{
"value": "3.1.34+20190228.1.c9f0de05+selfpack1-1",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "smarty3",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.1.39-2ubuntu1.22.04.2",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": [
{
"value": "3.1.39-2",
"evidence": "/affected/3/versions"
},
{
"value": "3.1.39-2ubuntu1",
"evidence": "/affected/3/versions"
},
{
"value": "3.1.39-2ubuntu1.22.04.1",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "smarty3",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.1.48-1ubuntu0.24.04.1",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": [
{
"value": "3.1.48-1",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "smarty4",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.3.1-1ubuntu0.24.04.1",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": [
{
"value": "4.3.1-1",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "smarty3",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.1.48-2",
"evidence": "/affected/6/versions"
}
]
},
{
"name": {
"value": "smarty3",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.1.48-2build1",
"evidence": "/affected/7/versions"
}
]
},
{
"name": {
"value": "smarty3",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.1.48-2",
"evidence": "/affected/8/versions"
},
{
"value": "3.1.48-2build1",
"evidence": "/affected/8/versions"
}
]
}
],
"severity": "high",
"structured": {
"id": "UBUNTU-CVE-2024-35226",
"aliases": [
"UBUNTU-CVE-2024-35226"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "smarty3",
"purl": "pkg:deb/ubuntu/smarty3?arch=source&distro=esm-apps%2Fxenial",
"ecosystem": "Ubuntu:Pro:16.04:LTS"
},
"versions": [
"3.1.21-1",
"3.1.21-1ubuntu1",
"3.1.21-1ubuntu1+esm1",
"3.1.21-1ubuntu1+esm2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-35226.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "smarty3",
"binary_version": "3.1.21-1ubuntu1+esm2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.1.31+20161214.1.c7d42e4+selfpack1-3ubuntu0.1+esm1"
}
]
}
],
"package": {
"name": "smarty3",
"purl": "pkg:deb/ubuntu/smarty3?arch=source&distro=esm-apps%2Fbionic",
"ecosystem": "Ubuntu:Pro:18.04:LTS"
},
"versions": [
"3.1.31+20161214.1.c7d42e4+selfpack1-2",
"3.1.31+20161214.1.c7d42e4+selfpack1-3",
"3.1.31+20161214.1.c7d42e4+selfpack1-3ubuntu0.1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-35226.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "smarty3",
"binary_version": "3.1.31+20161214.1.c7d42e4+selfpack1-3ubuntu0.1+esm1"
}
],
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.1.34+20190228.1.c9f0de05+selfpack1-1ubuntu0.1"
}
]
}
],
"package": {
"name": "smarty3",
"purl": "pkg:deb/ubuntu/smarty3?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"3.1.33+20180830.1.3a78a21f+selfpack1-1",
"3.1.34+20190228.1.c9f0de05+selfpack1-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-35226.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "smarty3",
"binary_version": "3.1.34+20190228.1.c9f0de05+selfpack1-1ubuntu0.1"
}
],
"availability": "No subscription required"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.1.39-2ubuntu1.22.04.2"
}
]
}
],
"package": {
"name": "smarty3",
"purl": "pkg:deb/ubuntu/smarty3?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"3.1.39-2",
"3.1.39-2ubuntu1",
"3.1.39-2ubuntu1.22.04.1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-35226.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "smarty3",
"binary_version": "3.1.39-2ubuntu1.22.04.2"
}
],
"availability": "No subscription required"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.1.48-1ubuntu0.24.04.1"
}
]
}
],
"package": {
"name": "smarty3",
"purl": "pkg:deb/ubuntu/smarty3?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"3.1.48-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-35226.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "smarty3",
"binary_version": "3.1.48-1ubuntu0.24.04.1"
}
],
"availability": "No subscription required"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.3.1-1ubuntu0.24.04.1"
}
]
}
],
"package": {
"name": "smarty4",
"purl": "pkg:deb/ubuntu/smarty4?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"4.3.1-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-35226.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "smarty4",
"binary_version": "4.3.1-1ubuntu0.24.04.1"
}
],
"availability": "No subscription required"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "smarty3",
"purl": "pkg:deb/ubuntu/smarty3?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"3.1.48-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-35226.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "smarty3",
"binary_version": "3.1.48-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "smarty3",
"purl": "pkg:deb/ubuntu/smarty3?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"3.1.48-2build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-35226.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "smarty3",
"binary_version": "3.1.48-2build1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "smarty3",
"purl": "pkg:deb/ubuntu/smarty3?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"3.1.48-2",
"3.1.48-2build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-35226.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "smarty3",
"binary_version": "3.1.48-2build1"
}
]
}
}
],
"modified": "2026-10-17T12:56:45.101587894Z",
"provider": "osv",
"upstream": [
"CVE-2024-35226"
],
"references": [
"https://ubuntu.com/security/CVE-2024-35226",
"https://www.cve.org/CVERecord?id=CVE-2024-35226",
"https://github.com/smarty-php/smarty/security/advisories/GHSA-4rmg-292m-wg3w",
"https://github.com/smarty-php/smarty/commit/76881c8d33d80648f70c9b0339f770f5f69a87a2",
"https://github.com/smarty-php/smarty/commit/0be92bc8a6fb83e6e0d883946f7e7c09ba4e857a",
"https://ubuntu.com/security/notices/USN-7158-1",
"https://ubuntu.com/security/notices/USN-7377-1"
]
},
"related_cves": [
{
"value": "CVE-2024-35226",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 356142,
"published_at": "2024-05-28T21:16:00+00:00"
}