Search for packages
| purl | pkg:deb/debian/symfony@3.4.14%2Bdfsg-1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-bhfu-7788-fbhc | URL Rewrite vulnerability An issue in Symfony arises from support for a (legacy) IIS header that lets users override the path in the request URL via the `X-Original-URL` or `X-Rewrite-URL` HTTP request header. These headers are designed for IIS support, but it's not verified that the server is in fact running IIS, which means anybody who can send these requests to an application can trigger this. This affects `\Symfony\Component\HttpFoundation\Request::prepareRequestUri()` where `X-Original-URL` and `X_REWRITE_URL` are both used. The fix drops support for these methods so that they cannot be used as attack vectors such as web cache poisoning. |
CVE-2018-14773
GHSA-8wgj-6wx8-h5hq |
| VCID-z2r1-8bdp-w7f5 | Improper Input Validation An issue was discovered in `HttpKernel` in Symfony When using `HttpCache`, the values of the `X-Forwarded-Host` headers are implicitly set as trusted while this should be forbidden, leading to potential host header injection. |
CVE-2018-14774
GHSA-66p6-7p29-55p9 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T09:36:17.462996+00:00 | Debian Importer | Fixing | VCID-z2r1-8bdp-w7f5 | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-16T09:29:30.246782+00:00 | Debian Importer | Fixing | VCID-bhfu-7788-fbhc | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-11T18:23:42.199390+00:00 | Debian Importer | Fixing | VCID-z2r1-8bdp-w7f5 | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-11T18:19:48.729037+00:00 | Debian Importer | Fixing | VCID-bhfu-7788-fbhc | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-03T07:53:41.995771+00:00 | Debian Importer | Fixing | VCID-z2r1-8bdp-w7f5 | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |
| 2026-04-03T07:53:41.954372+00:00 | Debian Importer | Fixing | VCID-bhfu-7788-fbhc | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |