Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2019-10909

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-g996-q5r8-w7g2

Symfony Cross-site Scripting (XSS) vulnerability In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, validation messages are not escaped, which can lead to XSS when user input is included. This is related to symfony/framework-bundle.

gitlab/packagist/drupal/core/CVE-2019-10909

Cross-site Scripting In Symfony, validation messages are not escaped, which can lead to XSS when user input is included.

gitlab/packagist/drupal/drupal/CVE-2019-10909

Cross-site Scripting In Symfony validation messages are not escaped, which can lead to XSS when user input is included.

gitlab/packagist/symfony/framework-bundle/CVE-2019-10909

Cross-site Scripting In Symfony validation messages are not escaped, which can lead to XSS when user input is included.

gitlab/packagist/symfony/symfony/CVE-2019-10909

Cross-site Scripting In Symfony, validation messages are not escaped, which can lead to XSS when user input is included. This is related to `symfony/framework-bundle`.