Is smarty/smarty 4.0 vulnerable?

Smarty: SSRF via redirect bypass of trusted_uri using {fetch}

Affected

>=5.0.0 <5.8.2 · <4.5.7

Fixed in

4.5.7, 5.8.2

Smarty: Symlink path traversal out of trusted directories

Affected

>=5.0.0 <5.8.2 · <4.5.7

Fixed in

4.5.7, 5.8.2

Smarty vulnerable to PHP Code Injection by malicious attribute in extends-tag

Affected

>=5.0.0 <5.1.1 · >=3.0.0 <4.5.3

Fixed in

4.5.3, 5.1.1

smarty Cross-site Scripting vulnerability in Javascript escaping

Affected

>=4.0.0 <4.3.1 · <3.1.48

Fixed in

3.1.48, 4.3.1

Smarty Cross-site Scripting vulnerability in pages that use smarty_function_mailto

Affected

<3.1.47 · >=4.0.0 <4.2.1

Fixed in

3.1.47, 4.2.1

PHP Code Injection by malicious block or filename in Smarty

Affected

<3.1.45 · >=4.0.0 <4.1.1

Fixed in

3.1.45, 4.1.1

Access to restricted PHP code by dynamic static class access in smarty

Affected

<3.1.43 · >=4.0.0 <4.0.3

Fixed in

3.1.43, 4.0.3

Sandbox Escape by math function in smarty

Affected

<3.1.42 · >=4.0.0 <4.0.2

Fixed in

3.1.42, 4.0.2