Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-j49y-k2gh-sya6
Summary
Empty passwords validation issue
Validating a user password with a `UserPassword` constraint but with no `NotBlank` constraint passes without any error (the empty password would not be compared with the user password). Note that you should always be explicit and add a `NotBlank` constraint, but as it worked before without, it's considered as a backward compatibility break and a security issue.
Aliases
0
alias CVE-2017-11365
1
alias GHSA-q87v-q8fw-gmj5
Fixed_packages
0
url pkg:composer/symfony/security@2.7.32
purl pkg:composer/symfony/security@2.7.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7cdk-bmdh-2fde
1
vulnerability VCID-fytq-6ane-hyf7
2
vulnerability VCID-h377-gc9v-abep
3
vulnerability VCID-n4kq-nskp-1qar
4
vulnerability VCID-zmrn-3fbj-gqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security@2.7.32
1
url pkg:composer/symfony/security@2.8.25
purl pkg:composer/symfony/security@2.8.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7cdk-bmdh-2fde
1
vulnerability VCID-8y4h-6hx7-v3h5
2
vulnerability VCID-fytq-6ane-hyf7
3
vulnerability VCID-h377-gc9v-abep
4
vulnerability VCID-n4kq-nskp-1qar
5
vulnerability VCID-tpgm-tx2g-4bh2
6
vulnerability VCID-w8s1-z3hu-8beh
7
vulnerability VCID-zmrn-3fbj-gqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security@2.8.25
2
url pkg:composer/symfony/security@3.2.12
purl pkg:composer/symfony/security@3.2.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7cdk-bmdh-2fde
1
vulnerability VCID-8y4h-6hx7-v3h5
2
vulnerability VCID-fytq-6ane-hyf7
3
vulnerability VCID-h377-gc9v-abep
4
vulnerability VCID-n4kq-nskp-1qar
5
vulnerability VCID-tpgm-tx2g-4bh2
6
vulnerability VCID-w8s1-z3hu-8beh
7
vulnerability VCID-zmrn-3fbj-gqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security@3.2.12
3
url pkg:composer/symfony/security@3.3.5
purl pkg:composer/symfony/security@3.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7cdk-bmdh-2fde
1
vulnerability VCID-8y4h-6hx7-v3h5
2
vulnerability VCID-fytq-6ane-hyf7
3
vulnerability VCID-h377-gc9v-abep
4
vulnerability VCID-n4kq-nskp-1qar
5
vulnerability VCID-tpgm-tx2g-4bh2
6
vulnerability VCID-w8s1-z3hu-8beh
7
vulnerability VCID-zmrn-3fbj-gqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security@3.3.5
4
url pkg:composer/symfony/security-core@2.7.32
purl pkg:composer/symfony/security-core@2.7.32
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security-core@2.7.32
5
url pkg:composer/symfony/security-core@2.8.25
purl pkg:composer/symfony/security-core@2.8.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8y4h-6hx7-v3h5
1
vulnerability VCID-tpgm-tx2g-4bh2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security-core@2.8.25
6
url pkg:composer/symfony/security-core@3.2.12
purl pkg:composer/symfony/security-core@3.2.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8y4h-6hx7-v3h5
1
vulnerability VCID-tpgm-tx2g-4bh2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security-core@3.2.12
7
url pkg:composer/symfony/security-core@3.3.5
purl pkg:composer/symfony/security-core@3.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8y4h-6hx7-v3h5
1
vulnerability VCID-tpgm-tx2g-4bh2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security-core@3.3.5
8
url pkg:composer/symfony/symfony@2.7.32
purl pkg:composer/symfony/symfony@2.7.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2fjn-22pk-p7fx
1
vulnerability VCID-59sy-m44r-h3gn
2
vulnerability VCID-5txj-xsnq-ducf
3
vulnerability VCID-6bdp-9ng3-uyb1
4
vulnerability VCID-6kq8-5k4z-27f2
5
vulnerability VCID-7cdk-bmdh-2fde
6
vulnerability VCID-7pwc-t6vf-eyax
7
vulnerability VCID-9mbr-qumx-8yhz
8
vulnerability VCID-d814-yjkr-p3ga
9
vulnerability VCID-fytq-6ane-hyf7
10
vulnerability VCID-g8cq-v4et-cue4
11
vulnerability VCID-h377-gc9v-abep
12
vulnerability VCID-hkcs-2mjk-ubhw
13
vulnerability VCID-kx25-m1mp-zfay
14
vulnerability VCID-mbd5-rsax-jya9
15
vulnerability VCID-mqjv-9ptq-q3g9
16
vulnerability VCID-mxta-zqzb-nfbv
17
vulnerability VCID-n1c7-yabu-jye7
18
vulnerability VCID-n4kq-nskp-1qar
19
vulnerability VCID-uvpz-6mss-9bgn
20
vulnerability VCID-vysf-2cxd-zqe2
21
vulnerability VCID-wnu2-cmrt-bkhr
22
vulnerability VCID-yasp-usps-xkc3
23
vulnerability VCID-yzth-mby6-fua5
24
vulnerability VCID-zmrn-3fbj-gqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/symfony@2.7.32
9
url pkg:composer/symfony/symfony@2.8.25
purl pkg:composer/symfony/symfony@2.8.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2fjn-22pk-p7fx
1
vulnerability VCID-59sy-m44r-h3gn
2
vulnerability VCID-5txj-xsnq-ducf
3
vulnerability VCID-6bdp-9ng3-uyb1
4
vulnerability VCID-6kq8-5k4z-27f2
5
vulnerability VCID-7cdk-bmdh-2fde
6
vulnerability VCID-7pwc-t6vf-eyax
7
vulnerability VCID-8627-nvyk-w7fu
8
vulnerability VCID-8y4h-6hx7-v3h5
9
vulnerability VCID-9mbr-qumx-8yhz
10
vulnerability VCID-a9gt-63v3-vbdf
11
vulnerability VCID-d814-yjkr-p3ga
12
vulnerability VCID-fytq-6ane-hyf7
13
vulnerability VCID-g8cq-v4et-cue4
14
vulnerability VCID-hkcs-2mjk-ubhw
15
vulnerability VCID-kx25-m1mp-zfay
16
vulnerability VCID-m1y3-csp4-aqe4
17
vulnerability VCID-mbd5-rsax-jya9
18
vulnerability VCID-mqjv-9ptq-q3g9
19
vulnerability VCID-mxta-zqzb-nfbv
20
vulnerability VCID-n1c7-yabu-jye7
21
vulnerability VCID-n4kq-nskp-1qar
22
vulnerability VCID-tpgm-tx2g-4bh2
23
vulnerability VCID-uvpz-6mss-9bgn
24
vulnerability VCID-vysf-2cxd-zqe2
25
vulnerability VCID-w8s1-z3hu-8beh
26
vulnerability VCID-wnu2-cmrt-bkhr
27
vulnerability VCID-yasp-usps-xkc3
28
vulnerability VCID-yzth-mby6-fua5
29
vulnerability VCID-zmrn-3fbj-gqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/symfony@2.8.25
10
url pkg:composer/symfony/symfony@3.2.12
purl pkg:composer/symfony/symfony@3.2.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2fjn-22pk-p7fx
1
vulnerability VCID-59sy-m44r-h3gn
2
vulnerability VCID-5txj-xsnq-ducf
3
vulnerability VCID-6bdp-9ng3-uyb1
4
vulnerability VCID-6kq8-5k4z-27f2
5
vulnerability VCID-7cdk-bmdh-2fde
6
vulnerability VCID-7pwc-t6vf-eyax
7
vulnerability VCID-8627-nvyk-w7fu
8
vulnerability VCID-8y4h-6hx7-v3h5
9
vulnerability VCID-9mbr-qumx-8yhz
10
vulnerability VCID-a9gt-63v3-vbdf
11
vulnerability VCID-d814-yjkr-p3ga
12
vulnerability VCID-fytq-6ane-hyf7
13
vulnerability VCID-g8cq-v4et-cue4
14
vulnerability VCID-h377-gc9v-abep
15
vulnerability VCID-hkcs-2mjk-ubhw
16
vulnerability VCID-kx25-m1mp-zfay
17
vulnerability VCID-m1y3-csp4-aqe4
18
vulnerability VCID-mbd5-rsax-jya9
19
vulnerability VCID-mqjv-9ptq-q3g9
20
vulnerability VCID-mxta-zqzb-nfbv
21
vulnerability VCID-n1c7-yabu-jye7
22
vulnerability VCID-n4kq-nskp-1qar
23
vulnerability VCID-tpgm-tx2g-4bh2
24
vulnerability VCID-uvpz-6mss-9bgn
25
vulnerability VCID-w8s1-z3hu-8beh
26
vulnerability VCID-wnu2-cmrt-bkhr
27
vulnerability VCID-x8xk-7pga-33hz
28
vulnerability VCID-yasp-usps-xkc3
29
vulnerability VCID-yzth-mby6-fua5
30
vulnerability VCID-zmrn-3fbj-gqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/symfony@3.2.12
11
url pkg:composer/symfony/symfony@3.3.5
purl pkg:composer/symfony/symfony@3.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2fjn-22pk-p7fx
1
vulnerability VCID-59sy-m44r-h3gn
2
vulnerability VCID-5txj-xsnq-ducf
3
vulnerability VCID-6bdp-9ng3-uyb1
4
vulnerability VCID-6kq8-5k4z-27f2
5
vulnerability VCID-7cdk-bmdh-2fde
6
vulnerability VCID-7pwc-t6vf-eyax
7
vulnerability VCID-8627-nvyk-w7fu
8
vulnerability VCID-8y4h-6hx7-v3h5
9
vulnerability VCID-9mbr-qumx-8yhz
10
vulnerability VCID-a9gt-63v3-vbdf
11
vulnerability VCID-d814-yjkr-p3ga
12
vulnerability VCID-fytq-6ane-hyf7
13
vulnerability VCID-g8cq-v4et-cue4
14
vulnerability VCID-h377-gc9v-abep
15
vulnerability VCID-hkcs-2mjk-ubhw
16
vulnerability VCID-kx25-m1mp-zfay
17
vulnerability VCID-m1y3-csp4-aqe4
18
vulnerability VCID-mbd5-rsax-jya9
19
vulnerability VCID-mqjv-9ptq-q3g9
20
vulnerability VCID-mxta-zqzb-nfbv
21
vulnerability VCID-n1c7-yabu-jye7
22
vulnerability VCID-n4kq-nskp-1qar
23
vulnerability VCID-tpgm-tx2g-4bh2
24
vulnerability VCID-uvpz-6mss-9bgn
25
vulnerability VCID-vysf-2cxd-zqe2
26
vulnerability VCID-w8s1-z3hu-8beh
27
vulnerability VCID-wnu2-cmrt-bkhr
28
vulnerability VCID-x8xk-7pga-33hz
29
vulnerability VCID-yasp-usps-xkc3
30
vulnerability VCID-yzth-mby6-fua5
31
vulnerability VCID-zmrn-3fbj-gqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/symfony@3.3.5
12
url pkg:deb/debian/symfony@0?distro=trixie
purl pkg:deb/debian/symfony@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/symfony@0%3Fdistro=trixie
13
url pkg:deb/debian/symfony@4.4.19%2Bdfsg-2%2Bdeb11u6?distro=trixie
purl pkg:deb/debian/symfony@4.4.19%2Bdfsg-2%2Bdeb11u6?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-31pu-2pt7-2fh2
1
vulnerability VCID-3rs1-f6qt-vqbn
2
vulnerability VCID-9cfq-wdcw-13f8
3
vulnerability VCID-brbn-9szp-2ubx
4
vulnerability VCID-buyw-5tjv-myem
5
vulnerability VCID-cfca-cgne-4fev
6
vulnerability VCID-d7r9-9h57-5yen
7
vulnerability VCID-gd71-zeaf-zqbr
8
vulnerability VCID-kxff-fp12-qfcu
9
vulnerability VCID-mqjv-9ptq-q3g9
10
vulnerability VCID-mzxb-ryz7-xbev
11
vulnerability VCID-nsrm-u4km-qqa1
12
vulnerability VCID-qscu-huud-4fbz
13
vulnerability VCID-styq-7bbp-pbf6
14
vulnerability VCID-usft-rqta-eyhg
15
vulnerability VCID-wv5b-2644-w3gf
16
vulnerability VCID-ya1e-7bph-pqgp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/symfony@4.4.19%252Bdfsg-2%252Bdeb11u6%3Fdistro=trixie
14
url pkg:deb/debian/symfony@5.4.23%2Bdfsg-1%2Bdeb12u5?distro=trixie
purl pkg:deb/debian/symfony@5.4.23%2Bdfsg-1%2Bdeb12u5?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-31pu-2pt7-2fh2
1
vulnerability VCID-9cfq-wdcw-13f8
2
vulnerability VCID-brbn-9szp-2ubx
3
vulnerability VCID-buyw-5tjv-myem
4
vulnerability VCID-cfca-cgne-4fev
5
vulnerability VCID-d7r9-9h57-5yen
6
vulnerability VCID-gd71-zeaf-zqbr
7
vulnerability VCID-kxff-fp12-qfcu
8
vulnerability VCID-mzxb-ryz7-xbev
9
vulnerability VCID-nsrm-u4km-qqa1
10
vulnerability VCID-qscu-huud-4fbz
11
vulnerability VCID-styq-7bbp-pbf6
12
vulnerability VCID-usft-rqta-eyhg
13
vulnerability VCID-wv5b-2644-w3gf
14
vulnerability VCID-ya1e-7bph-pqgp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/symfony@5.4.23%252Bdfsg-1%252Bdeb12u5%3Fdistro=trixie
15
url pkg:deb/debian/symfony@6.4.21%2Bdfsg-2%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/symfony@6.4.21%2Bdfsg-2%2Bdeb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-31pu-2pt7-2fh2
1
vulnerability VCID-3rs1-f6qt-vqbn
2
vulnerability VCID-4e6m-3qj2-67ag
3
vulnerability VCID-4ufx-41vp-ducg
4
vulnerability VCID-5113-3b42-j3eh
5
vulnerability VCID-5qmw-a84t-dfge
6
vulnerability VCID-8akz-87u4-7uh9
7
vulnerability VCID-8vur-b48u-pqeu
8
vulnerability VCID-9cfq-wdcw-13f8
9
vulnerability VCID-brbn-9szp-2ubx
10
vulnerability VCID-btxp-ywr3-ukgj
11
vulnerability VCID-buyw-5tjv-myem
12
vulnerability VCID-cfca-cgne-4fev
13
vulnerability VCID-d7r9-9h57-5yen
14
vulnerability VCID-fh6h-dyx9-83h1
15
vulnerability VCID-gd71-zeaf-zqbr
16
vulnerability VCID-kxff-fp12-qfcu
17
vulnerability VCID-mzxb-ryz7-xbev
18
vulnerability VCID-nsrm-u4km-qqa1
19
vulnerability VCID-qscu-huud-4fbz
20
vulnerability VCID-styq-7bbp-pbf6
21
vulnerability VCID-usft-rqta-eyhg
22
vulnerability VCID-wv5b-2644-w3gf
23
vulnerability VCID-ya1e-7bph-pqgp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/symfony@6.4.21%252Bdfsg-2%252Bdeb13u1%3Fdistro=trixie
16
url pkg:deb/debian/symfony@7.4.13%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/symfony@7.4.13%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/symfony@7.4.13%252Bdfsg-1%3Fdistro=trixie
Affected_packages
0
url pkg:composer/symfony/security@2.7.30
purl pkg:composer/symfony/security@2.7.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7cdk-bmdh-2fde
1
vulnerability VCID-fytq-6ane-hyf7
2
vulnerability VCID-h377-gc9v-abep
3
vulnerability VCID-j49y-k2gh-sya6
4
vulnerability VCID-n4kq-nskp-1qar
5
vulnerability VCID-zmrn-3fbj-gqcm
6
vulnerability VCID-zqk8-27jq-j7dx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security@2.7.30
1
url pkg:composer/symfony/security@2.7.31
purl pkg:composer/symfony/security@2.7.31
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7cdk-bmdh-2fde
1
vulnerability VCID-fytq-6ane-hyf7
2
vulnerability VCID-h377-gc9v-abep
3
vulnerability VCID-j49y-k2gh-sya6
4
vulnerability VCID-n4kq-nskp-1qar
5
vulnerability VCID-zmrn-3fbj-gqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security@2.7.31
2
url pkg:composer/symfony/security@2.8.23
purl pkg:composer/symfony/security@2.8.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7cdk-bmdh-2fde
1
vulnerability VCID-8y4h-6hx7-v3h5
2
vulnerability VCID-fytq-6ane-hyf7
3
vulnerability VCID-h377-gc9v-abep
4
vulnerability VCID-j49y-k2gh-sya6
5
vulnerability VCID-n4kq-nskp-1qar
6
vulnerability VCID-tpgm-tx2g-4bh2
7
vulnerability VCID-w8s1-z3hu-8beh
8
vulnerability VCID-zmrn-3fbj-gqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security@2.8.23
3
url pkg:composer/symfony/security@2.8.24
purl pkg:composer/symfony/security@2.8.24
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7cdk-bmdh-2fde
1
vulnerability VCID-8y4h-6hx7-v3h5
2
vulnerability VCID-fytq-6ane-hyf7
3
vulnerability VCID-h377-gc9v-abep
4
vulnerability VCID-j49y-k2gh-sya6
5
vulnerability VCID-n4kq-nskp-1qar
6
vulnerability VCID-tpgm-tx2g-4bh2
7
vulnerability VCID-w8s1-z3hu-8beh
8
vulnerability VCID-zmrn-3fbj-gqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security@2.8.24
4
url pkg:composer/symfony/security@3.2.10
purl pkg:composer/symfony/security@3.2.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7cdk-bmdh-2fde
1
vulnerability VCID-8y4h-6hx7-v3h5
2
vulnerability VCID-fytq-6ane-hyf7
3
vulnerability VCID-h377-gc9v-abep
4
vulnerability VCID-j49y-k2gh-sya6
5
vulnerability VCID-n4kq-nskp-1qar
6
vulnerability VCID-tpgm-tx2g-4bh2
7
vulnerability VCID-w8s1-z3hu-8beh
8
vulnerability VCID-zmrn-3fbj-gqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security@3.2.10
5
url pkg:composer/symfony/security@3.2.11
purl pkg:composer/symfony/security@3.2.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7cdk-bmdh-2fde
1
vulnerability VCID-8y4h-6hx7-v3h5
2
vulnerability VCID-fytq-6ane-hyf7
3
vulnerability VCID-h377-gc9v-abep
4
vulnerability VCID-j49y-k2gh-sya6
5
vulnerability VCID-n4kq-nskp-1qar
6
vulnerability VCID-tpgm-tx2g-4bh2
7
vulnerability VCID-w8s1-z3hu-8beh
8
vulnerability VCID-zmrn-3fbj-gqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security@3.2.11
6
url pkg:composer/symfony/security@3.3.3
purl pkg:composer/symfony/security@3.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7cdk-bmdh-2fde
1
vulnerability VCID-8y4h-6hx7-v3h5
2
vulnerability VCID-fytq-6ane-hyf7
3
vulnerability VCID-h377-gc9v-abep
4
vulnerability VCID-j49y-k2gh-sya6
5
vulnerability VCID-n4kq-nskp-1qar
6
vulnerability VCID-tpgm-tx2g-4bh2
7
vulnerability VCID-w8s1-z3hu-8beh
8
vulnerability VCID-zmrn-3fbj-gqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security@3.3.3
7
url pkg:composer/symfony/security@3.3.4
purl pkg:composer/symfony/security@3.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7cdk-bmdh-2fde
1
vulnerability VCID-8y4h-6hx7-v3h5
2
vulnerability VCID-fytq-6ane-hyf7
3
vulnerability VCID-h377-gc9v-abep
4
vulnerability VCID-j49y-k2gh-sya6
5
vulnerability VCID-n4kq-nskp-1qar
6
vulnerability VCID-tpgm-tx2g-4bh2
7
vulnerability VCID-w8s1-z3hu-8beh
8
vulnerability VCID-zmrn-3fbj-gqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security@3.3.4
8
url pkg:composer/symfony/security-core@2.7.30
purl pkg:composer/symfony/security-core@2.7.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-j49y-k2gh-sya6
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security-core@2.7.30
9
url pkg:composer/symfony/security-core@2.7.31
purl pkg:composer/symfony/security-core@2.7.31
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-j49y-k2gh-sya6
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security-core@2.7.31
10
url pkg:composer/symfony/security-core@2.8.23
purl pkg:composer/symfony/security-core@2.8.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8y4h-6hx7-v3h5
1
vulnerability VCID-j49y-k2gh-sya6
2
vulnerability VCID-tpgm-tx2g-4bh2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security-core@2.8.23
11
url pkg:composer/symfony/security-core@2.8.24
purl pkg:composer/symfony/security-core@2.8.24
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8y4h-6hx7-v3h5
1
vulnerability VCID-j49y-k2gh-sya6
2
vulnerability VCID-tpgm-tx2g-4bh2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security-core@2.8.24
12
url pkg:composer/symfony/security-core@3.2.10
purl pkg:composer/symfony/security-core@3.2.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8y4h-6hx7-v3h5
1
vulnerability VCID-j49y-k2gh-sya6
2
vulnerability VCID-tpgm-tx2g-4bh2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security-core@3.2.10
13
url pkg:composer/symfony/security-core@3.2.11
purl pkg:composer/symfony/security-core@3.2.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8y4h-6hx7-v3h5
1
vulnerability VCID-j49y-k2gh-sya6
2
vulnerability VCID-tpgm-tx2g-4bh2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security-core@3.2.11
14
url pkg:composer/symfony/security-core@3.3.3
purl pkg:composer/symfony/security-core@3.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8y4h-6hx7-v3h5
1
vulnerability VCID-j49y-k2gh-sya6
2
vulnerability VCID-tpgm-tx2g-4bh2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security-core@3.3.3
15
url pkg:composer/symfony/security-core@3.3.4
purl pkg:composer/symfony/security-core@3.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8y4h-6hx7-v3h5
1
vulnerability VCID-j49y-k2gh-sya6
2
vulnerability VCID-tpgm-tx2g-4bh2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security-core@3.3.4
16
url pkg:composer/symfony/symfony@2.7.30
purl pkg:composer/symfony/symfony@2.7.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2fjn-22pk-p7fx
1
vulnerability VCID-59sy-m44r-h3gn
2
vulnerability VCID-5txj-xsnq-ducf
3
vulnerability VCID-6bdp-9ng3-uyb1
4
vulnerability VCID-6kq8-5k4z-27f2
5
vulnerability VCID-7cdk-bmdh-2fde
6
vulnerability VCID-7pwc-t6vf-eyax
7
vulnerability VCID-9mbr-qumx-8yhz
8
vulnerability VCID-d814-yjkr-p3ga
9
vulnerability VCID-fytq-6ane-hyf7
10
vulnerability VCID-g8cq-v4et-cue4
11
vulnerability VCID-h377-gc9v-abep
12
vulnerability VCID-hkcs-2mjk-ubhw
13
vulnerability VCID-j49y-k2gh-sya6
14
vulnerability VCID-kx25-m1mp-zfay
15
vulnerability VCID-mbd5-rsax-jya9
16
vulnerability VCID-mqjv-9ptq-q3g9
17
vulnerability VCID-mxta-zqzb-nfbv
18
vulnerability VCID-n1c7-yabu-jye7
19
vulnerability VCID-n4kq-nskp-1qar
20
vulnerability VCID-uvpz-6mss-9bgn
21
vulnerability VCID-vysf-2cxd-zqe2
22
vulnerability VCID-wnu2-cmrt-bkhr
23
vulnerability VCID-yasp-usps-xkc3
24
vulnerability VCID-yzth-mby6-fua5
25
vulnerability VCID-zmrn-3fbj-gqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/symfony@2.7.30
17
url pkg:composer/symfony/symfony@2.7.31
purl pkg:composer/symfony/symfony@2.7.31
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2fjn-22pk-p7fx
1
vulnerability VCID-59sy-m44r-h3gn
2
vulnerability VCID-5txj-xsnq-ducf
3
vulnerability VCID-6bdp-9ng3-uyb1
4
vulnerability VCID-6kq8-5k4z-27f2
5
vulnerability VCID-7cdk-bmdh-2fde
6
vulnerability VCID-7pwc-t6vf-eyax
7
vulnerability VCID-9mbr-qumx-8yhz
8
vulnerability VCID-d814-yjkr-p3ga
9
vulnerability VCID-fytq-6ane-hyf7
10
vulnerability VCID-g8cq-v4et-cue4
11
vulnerability VCID-h377-gc9v-abep
12
vulnerability VCID-hkcs-2mjk-ubhw
13
vulnerability VCID-j49y-k2gh-sya6
14
vulnerability VCID-kx25-m1mp-zfay
15
vulnerability VCID-mbd5-rsax-jya9
16
vulnerability VCID-mqjv-9ptq-q3g9
17
vulnerability VCID-mxta-zqzb-nfbv
18
vulnerability VCID-n1c7-yabu-jye7
19
vulnerability VCID-n4kq-nskp-1qar
20
vulnerability VCID-uvpz-6mss-9bgn
21
vulnerability VCID-vysf-2cxd-zqe2
22
vulnerability VCID-wnu2-cmrt-bkhr
23
vulnerability VCID-yasp-usps-xkc3
24
vulnerability VCID-yzth-mby6-fua5
25
vulnerability VCID-zmrn-3fbj-gqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/symfony@2.7.31
18
url pkg:composer/symfony/symfony@2.8.23
purl pkg:composer/symfony/symfony@2.8.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2fjn-22pk-p7fx
1
vulnerability VCID-59sy-m44r-h3gn
2
vulnerability VCID-5txj-xsnq-ducf
3
vulnerability VCID-6bdp-9ng3-uyb1
4
vulnerability VCID-6kq8-5k4z-27f2
5
vulnerability VCID-7cdk-bmdh-2fde
6
vulnerability VCID-7pwc-t6vf-eyax
7
vulnerability VCID-8627-nvyk-w7fu
8
vulnerability VCID-8y4h-6hx7-v3h5
9
vulnerability VCID-9mbr-qumx-8yhz
10
vulnerability VCID-a9gt-63v3-vbdf
11
vulnerability VCID-d814-yjkr-p3ga
12
vulnerability VCID-fytq-6ane-hyf7
13
vulnerability VCID-g8cq-v4et-cue4
14
vulnerability VCID-hkcs-2mjk-ubhw
15
vulnerability VCID-j49y-k2gh-sya6
16
vulnerability VCID-kx25-m1mp-zfay
17
vulnerability VCID-m1y3-csp4-aqe4
18
vulnerability VCID-mbd5-rsax-jya9
19
vulnerability VCID-mqjv-9ptq-q3g9
20
vulnerability VCID-mxta-zqzb-nfbv
21
vulnerability VCID-n1c7-yabu-jye7
22
vulnerability VCID-n4kq-nskp-1qar
23
vulnerability VCID-tpgm-tx2g-4bh2
24
vulnerability VCID-uvpz-6mss-9bgn
25
vulnerability VCID-vysf-2cxd-zqe2
26
vulnerability VCID-w8s1-z3hu-8beh
27
vulnerability VCID-wnu2-cmrt-bkhr
28
vulnerability VCID-yasp-usps-xkc3
29
vulnerability VCID-yzth-mby6-fua5
30
vulnerability VCID-zmrn-3fbj-gqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/symfony@2.8.23
19
url pkg:composer/symfony/symfony@2.8.24
purl pkg:composer/symfony/symfony@2.8.24
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2fjn-22pk-p7fx
1
vulnerability VCID-59sy-m44r-h3gn
2
vulnerability VCID-5txj-xsnq-ducf
3
vulnerability VCID-6bdp-9ng3-uyb1
4
vulnerability VCID-6kq8-5k4z-27f2
5
vulnerability VCID-7cdk-bmdh-2fde
6
vulnerability VCID-7pwc-t6vf-eyax
7
vulnerability VCID-8627-nvyk-w7fu
8
vulnerability VCID-8y4h-6hx7-v3h5
9
vulnerability VCID-9mbr-qumx-8yhz
10
vulnerability VCID-a9gt-63v3-vbdf
11
vulnerability VCID-d814-yjkr-p3ga
12
vulnerability VCID-fytq-6ane-hyf7
13
vulnerability VCID-g8cq-v4et-cue4
14
vulnerability VCID-hkcs-2mjk-ubhw
15
vulnerability VCID-j49y-k2gh-sya6
16
vulnerability VCID-kx25-m1mp-zfay
17
vulnerability VCID-m1y3-csp4-aqe4
18
vulnerability VCID-mbd5-rsax-jya9
19
vulnerability VCID-mqjv-9ptq-q3g9
20
vulnerability VCID-mxta-zqzb-nfbv
21
vulnerability VCID-n1c7-yabu-jye7
22
vulnerability VCID-n4kq-nskp-1qar
23
vulnerability VCID-tpgm-tx2g-4bh2
24
vulnerability VCID-uvpz-6mss-9bgn
25
vulnerability VCID-vysf-2cxd-zqe2
26
vulnerability VCID-w8s1-z3hu-8beh
27
vulnerability VCID-wnu2-cmrt-bkhr
28
vulnerability VCID-yasp-usps-xkc3
29
vulnerability VCID-yzth-mby6-fua5
30
vulnerability VCID-zmrn-3fbj-gqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/symfony@2.8.24
20
url pkg:composer/symfony/symfony@3.2.10
purl pkg:composer/symfony/symfony@3.2.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2fjn-22pk-p7fx
1
vulnerability VCID-59sy-m44r-h3gn
2
vulnerability VCID-5txj-xsnq-ducf
3
vulnerability VCID-6bdp-9ng3-uyb1
4
vulnerability VCID-6kq8-5k4z-27f2
5
vulnerability VCID-7cdk-bmdh-2fde
6
vulnerability VCID-7pwc-t6vf-eyax
7
vulnerability VCID-8627-nvyk-w7fu
8
vulnerability VCID-8y4h-6hx7-v3h5
9
vulnerability VCID-9mbr-qumx-8yhz
10
vulnerability VCID-a9gt-63v3-vbdf
11
vulnerability VCID-d814-yjkr-p3ga
12
vulnerability VCID-fytq-6ane-hyf7
13
vulnerability VCID-g8cq-v4et-cue4
14
vulnerability VCID-h377-gc9v-abep
15
vulnerability VCID-hkcs-2mjk-ubhw
16
vulnerability VCID-j49y-k2gh-sya6
17
vulnerability VCID-kx25-m1mp-zfay
18
vulnerability VCID-m1y3-csp4-aqe4
19
vulnerability VCID-mbd5-rsax-jya9
20
vulnerability VCID-mqjv-9ptq-q3g9
21
vulnerability VCID-mxta-zqzb-nfbv
22
vulnerability VCID-n1c7-yabu-jye7
23
vulnerability VCID-n4kq-nskp-1qar
24
vulnerability VCID-tpgm-tx2g-4bh2
25
vulnerability VCID-uvpz-6mss-9bgn
26
vulnerability VCID-w8s1-z3hu-8beh
27
vulnerability VCID-wnu2-cmrt-bkhr
28
vulnerability VCID-x8xk-7pga-33hz
29
vulnerability VCID-yasp-usps-xkc3
30
vulnerability VCID-yzth-mby6-fua5
31
vulnerability VCID-zmrn-3fbj-gqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/symfony@3.2.10
21
url pkg:composer/symfony/symfony@3.2.11
purl pkg:composer/symfony/symfony@3.2.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2fjn-22pk-p7fx
1
vulnerability VCID-59sy-m44r-h3gn
2
vulnerability VCID-5txj-xsnq-ducf
3
vulnerability VCID-6bdp-9ng3-uyb1
4
vulnerability VCID-6kq8-5k4z-27f2
5
vulnerability VCID-7cdk-bmdh-2fde
6
vulnerability VCID-7pwc-t6vf-eyax
7
vulnerability VCID-8627-nvyk-w7fu
8
vulnerability VCID-8y4h-6hx7-v3h5
9
vulnerability VCID-9mbr-qumx-8yhz
10
vulnerability VCID-a9gt-63v3-vbdf
11
vulnerability VCID-d814-yjkr-p3ga
12
vulnerability VCID-fytq-6ane-hyf7
13
vulnerability VCID-g8cq-v4et-cue4
14
vulnerability VCID-h377-gc9v-abep
15
vulnerability VCID-hkcs-2mjk-ubhw
16
vulnerability VCID-j49y-k2gh-sya6
17
vulnerability VCID-kx25-m1mp-zfay
18
vulnerability VCID-m1y3-csp4-aqe4
19
vulnerability VCID-mbd5-rsax-jya9
20
vulnerability VCID-mqjv-9ptq-q3g9
21
vulnerability VCID-mxta-zqzb-nfbv
22
vulnerability VCID-n1c7-yabu-jye7
23
vulnerability VCID-n4kq-nskp-1qar
24
vulnerability VCID-tpgm-tx2g-4bh2
25
vulnerability VCID-uvpz-6mss-9bgn
26
vulnerability VCID-w8s1-z3hu-8beh
27
vulnerability VCID-wnu2-cmrt-bkhr
28
vulnerability VCID-x8xk-7pga-33hz
29
vulnerability VCID-yasp-usps-xkc3
30
vulnerability VCID-yzth-mby6-fua5
31
vulnerability VCID-zmrn-3fbj-gqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/symfony@3.2.11
22
url pkg:composer/symfony/symfony@3.3.3
purl pkg:composer/symfony/symfony@3.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2fjn-22pk-p7fx
1
vulnerability VCID-59sy-m44r-h3gn
2
vulnerability VCID-5txj-xsnq-ducf
3
vulnerability VCID-6bdp-9ng3-uyb1
4
vulnerability VCID-6kq8-5k4z-27f2
5
vulnerability VCID-7cdk-bmdh-2fde
6
vulnerability VCID-7pwc-t6vf-eyax
7
vulnerability VCID-8627-nvyk-w7fu
8
vulnerability VCID-8y4h-6hx7-v3h5
9
vulnerability VCID-9mbr-qumx-8yhz
10
vulnerability VCID-a9gt-63v3-vbdf
11
vulnerability VCID-d814-yjkr-p3ga
12
vulnerability VCID-fytq-6ane-hyf7
13
vulnerability VCID-g8cq-v4et-cue4
14
vulnerability VCID-h377-gc9v-abep
15
vulnerability VCID-hkcs-2mjk-ubhw
16
vulnerability VCID-j49y-k2gh-sya6
17
vulnerability VCID-kx25-m1mp-zfay
18
vulnerability VCID-m1y3-csp4-aqe4
19
vulnerability VCID-mbd5-rsax-jya9
20
vulnerability VCID-mqjv-9ptq-q3g9
21
vulnerability VCID-mxta-zqzb-nfbv
22
vulnerability VCID-n1c7-yabu-jye7
23
vulnerability VCID-n4kq-nskp-1qar
24
vulnerability VCID-tpgm-tx2g-4bh2
25
vulnerability VCID-uvpz-6mss-9bgn
26
vulnerability VCID-vysf-2cxd-zqe2
27
vulnerability VCID-w8s1-z3hu-8beh
28
vulnerability VCID-wnu2-cmrt-bkhr
29
vulnerability VCID-x8xk-7pga-33hz
30
vulnerability VCID-yasp-usps-xkc3
31
vulnerability VCID-yzth-mby6-fua5
32
vulnerability VCID-zmrn-3fbj-gqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/symfony@3.3.3
23
url pkg:composer/symfony/symfony@3.3.4
purl pkg:composer/symfony/symfony@3.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2fjn-22pk-p7fx
1
vulnerability VCID-59sy-m44r-h3gn
2
vulnerability VCID-5txj-xsnq-ducf
3
vulnerability VCID-6bdp-9ng3-uyb1
4
vulnerability VCID-6kq8-5k4z-27f2
5
vulnerability VCID-7cdk-bmdh-2fde
6
vulnerability VCID-7pwc-t6vf-eyax
7
vulnerability VCID-8627-nvyk-w7fu
8
vulnerability VCID-8y4h-6hx7-v3h5
9
vulnerability VCID-9mbr-qumx-8yhz
10
vulnerability VCID-a9gt-63v3-vbdf
11
vulnerability VCID-d814-yjkr-p3ga
12
vulnerability VCID-fytq-6ane-hyf7
13
vulnerability VCID-g8cq-v4et-cue4
14
vulnerability VCID-h377-gc9v-abep
15
vulnerability VCID-hkcs-2mjk-ubhw
16
vulnerability VCID-j49y-k2gh-sya6
17
vulnerability VCID-kx25-m1mp-zfay
18
vulnerability VCID-m1y3-csp4-aqe4
19
vulnerability VCID-mbd5-rsax-jya9
20
vulnerability VCID-mqjv-9ptq-q3g9
21
vulnerability VCID-mxta-zqzb-nfbv
22
vulnerability VCID-n1c7-yabu-jye7
23
vulnerability VCID-n4kq-nskp-1qar
24
vulnerability VCID-tpgm-tx2g-4bh2
25
vulnerability VCID-uvpz-6mss-9bgn
26
vulnerability VCID-vysf-2cxd-zqe2
27
vulnerability VCID-w8s1-z3hu-8beh
28
vulnerability VCID-wnu2-cmrt-bkhr
29
vulnerability VCID-x8xk-7pga-33hz
30
vulnerability VCID-yasp-usps-xkc3
31
vulnerability VCID-yzth-mby6-fua5
32
vulnerability VCID-zmrn-3fbj-gqcm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/symfony@3.3.4
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-11365
reference_id
reference_type
scores
0
value 0.00356
scoring_system epss
scoring_elements 0.58133
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-11365
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-core/CVE-2017-11365.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-core/CVE-2017-11365.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security/CVE-2017-11365.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security/CVE-2017-11365.yaml
3
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2017-11365.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2017-11365.yaml
4
reference_url https://github.com/symfony/symfony
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/symfony/symfony
5
reference_url https://github.com/symfony/symfony/commit/878198cefae028386c6dc800ccbf18f2b9cbff3f
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/symfony/symfony/commit/878198cefae028386c6dc800ccbf18f2b9cbff3f
6
reference_url https://github.com/symfony/symfony/pull/23507
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/symfony/symfony/pull/23507
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-11365
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-11365
8
reference_url https://symfony.com/cve-2017-11365
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://symfony.com/cve-2017-11365
9
reference_url https://symfony.com/blog/cve-2017-11365-empty-passwords-validation-issue
reference_id CVE-2017-11365-EMPTY-PASSWORDS-VALIDATION-ISSUE
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://symfony.com/blog/cve-2017-11365-empty-passwords-validation-issue
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 284
name Improper Access Control
description The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score9.0 - 10.0
Exploitability0.5
Weighted_severity0.0
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-j49y-k2gh-sya6