Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/friendsofsymfony/user-bundle@1.3.0
purl pkg:composer/friendsofsymfony/user-bundle@1.3.0
Next non-vulnerable version 1.3.3
Latest non-vulnerable version 1.3.5
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-ky5a-sata-5yf6
Aliases:
CVE-2013-5750
GHSA-9mpf-g3fc-9rgv
Uncontrolled Resource Consumption The login form in the FriendsOfSymfony FOSUserBundle bundle for Symfony allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation.
1.3.3
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-cp9j-3948-mud8 Insufficient Entropy Entropy is lost in the `TokenGenerator`. GMS-2014-38

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:36:17.818549+00:00 GitLab Importer Fixing VCID-cp9j-3948-mud8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/friendsofsymfony/user-bundle/GMS-2014-38.yml 38.6.0
2026-06-02T04:36:11.114946+00:00 GitLab Importer Affected by VCID-ky5a-sata-5yf6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/friendsofsymfony/user-bundle/CVE-2013-5750.yml 38.6.0