Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/friendsofsymfony/user-bundle@1.3.5
purl pkg:composer/friendsofsymfony/user-bundle@1.3.5
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-yyyq-za39-r3hh FOSUserBundle Entropy is lost in the TokenGenerator Because of the usage of base_convert which looses precision for large inputs, the entropy of tokens generated by FOSUserBundle for the email confirmation and password resetting is lost. This makes these tokens much less random than they are expected to be, and so not cryptographically safe. GHSA-pjx8-984p-7p3x

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-05T21:43:15.176411+00:00 GHSA Importer Fixing VCID-yyyq-za39-r3hh https://github.com/advisories/GHSA-pjx8-984p-7p3x 38.6.0
2026-06-04T16:51:27.450954+00:00 GithubOSV Importer Fixing VCID-yyyq-za39-r3hh https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/05/GHSA-pjx8-984p-7p3x/GHSA-pjx8-984p-7p3x.json 38.6.0
2026-06-04T16:21:41.270206+00:00 GitLab Importer Fixing VCID-yyyq-za39-r3hh https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/friendsofsymfony/user-bundle/GHSA-pjx8-984p-7p3x.yml 38.6.0