added a vulnerability for Twig