Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/symfony@2.7.0~beta2%2Bdfsg-2?distro=trixie
purl pkg:deb/debian/symfony@2.7.0~beta2%2Bdfsg-2?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-up7g-6ewp-uya5 Improper Access Control FragmentListener in the HttpKernel component in Symfony, when ESI or SSI support enabled, does not check if the `_controller` attribute is set, which allows remote attackers to bypass URL signing and security rules by including (1) no hash or (2) an invalid hash in a request to `/_fragment`. CVE-2015-4050
GHSA-qmqw-mpqp-mr54

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T10:12:45.978124+00:00 Debian Importer Fixing VCID-up7g-6ewp-uya5 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T06:51:57.693422+00:00 Debian Importer Fixing VCID-up7g-6ewp-uya5 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:53:41.200913+00:00 Debian Importer Fixing VCID-up7g-6ewp-uya5 https://security-tracker.debian.org/tracker/data/json 38.1.0