Search for packages
| purl | pkg:deb/debian/symfony@3.4.20%2Bdfsg-1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-27sw-43vt-ukh3 | Unrestricted Upload of File with Dangerous Type When using the scalar type hint `string` in a setter method (e.g. `setName(string$name)`) of a class that's the `data_class` of a form, and when a file upload is submitted to the corresponding field instead of a normal text input, then `UploadedFile::__toString()` is called which will then return and disclose the path of the uploaded file. If combined with a local file inclusion issue in certain circumstances this could escalate it to a Remote Code Execution. |
CVE-2018-19789
GHSA-x3cf-w64x-4cp2 |
| VCID-v81g-hqja-hue2 | URL Redirection to Untrusted Site (Open Redirect) By using backslashes in the `_failure_path` input field of login forms, an attacker can work around the redirection target restrictions and effectively redirect the user to any domain after login. |
CVE-2018-19790
GHSA-89r2-5g34-2g47 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T11:45:13.753758+00:00 | Debian Importer | Fixing | VCID-27sw-43vt-ukh3 | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-16T10:14:18.029828+00:00 | Debian Importer | Fixing | VCID-v81g-hqja-hue2 | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-13T08:00:50.345754+00:00 | Debian Importer | Fixing | VCID-27sw-43vt-ukh3 | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-13T06:53:02.872476+00:00 | Debian Importer | Fixing | VCID-v81g-hqja-hue2 | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-03T07:53:42.077797+00:00 | Debian Importer | Fixing | VCID-v81g-hqja-hue2 | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |
| 2026-04-03T07:53:42.037251+00:00 | Debian Importer | Fixing | VCID-27sw-43vt-ukh3 | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |