Search for packages
| purl | pkg:composer/symfony/security-core@2.7.31 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-76y9-1jsf-rfez
Aliases: CVE-2017-11365 GHSA-q87v-q8fw-gmj5 |
Empty passwords validation issue Validating a user password with a `UserPassword` constraint but with no `NotBlank` constraint passes without any error (the empty password would not be compared with the user password). Note that you should always be explicit and add a `NotBlank` constraint, but as it worked before without, it's considered as a backward compatibility break and a security issue. |
Affected by 0 other vulnerabilities. Affected by 2 other vulnerabilities. Affected by 2 other vulnerabilities. Affected by 2 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T20:54:41.846515+00:00 | GitLab Importer | Affected by | VCID-76y9-1jsf-rfez | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/symfony/security-core/CVE-2017-11365.yml | 38.4.0 |
| 2026-04-11T22:05:40.237129+00:00 | GitLab Importer | Affected by | VCID-76y9-1jsf-rfez | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/symfony/security-core/CVE-2017-11365.yml | 38.3.0 |
| 2026-04-02T22:18:30.846347+00:00 | GitLab Importer | Affected by | VCID-76y9-1jsf-rfez | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/symfony/security-core/CVE-2017-11365.yml | 38.1.0 |
| 2026-04-01T16:36:14.150828+00:00 | GitLab Importer | Affected by | VCID-76y9-1jsf-rfez | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/symfony/security-core/CVE-2017-11365.yml | 38.0.0 |