[CVE-2018-13982] smarty/smarty should be updated to ^3.1.33

[zerai (Zero)]

smarty/smarty (v2.6.31)

• CVE-2018-13982: Trusted-Directory Bypass via Path Traversal

[brady.miller]

Hi,

Completely agree. We have an issue for this here:

Issue: Migrate Smarty 2 code to Smarty 3

I am pretty sure that issue is open for a new developer (appears the prior developer is no longer working on it, which I will confirm).

-brady