Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/friendsofsymfony/user-bundle@1.0.0
purl pkg:composer/friendsofsymfony/user-bundle@1.0.0
Tags Ghost
Next non-vulnerable version 1.3.5
Latest non-vulnerable version 1.3.5
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-yyyq-za39-r3hh
Aliases:
GHSA-pjx8-984p-7p3x
FOSUserBundle Entropy is lost in the TokenGenerator Because of the usage of base_convert which looses precision for large inputs, the entropy of tokens generated by FOSUserBundle for the email confirmation and password resetting is lost. This makes these tokens much less random than they are expected to be, and so not cryptographically safe.
1.3.5
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-05T21:43:15.172608+00:00 GHSA Importer Affected by VCID-yyyq-za39-r3hh https://github.com/advisories/GHSA-pjx8-984p-7p3x 38.6.0
2026-06-04T16:21:41.267587+00:00 GitLab Importer Affected by VCID-yyyq-za39-r3hh https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/friendsofsymfony/user-bundle/GHSA-pjx8-984p-7p3x.yml 38.6.0