Two security vulnerabilities were discovered in Smarty, a template
engine for PHP, which could result in PHP code injection or cross-site
scripting.

https://security-tracker.debian.org/tracker/DSA-5826-1

Read More