Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-dbr2-6b2j-m7hx
Summary
Improper Input Validation
In Symfony, when a `Response` does not contain a `Content-Type` header, affected versions of Symfony can fallback to the format defined in the `Accept` header of the request, leading to a possible mismatch between the response content and `Content-Type` header. When the response is cached, this can prevent the use of the website by other users.
Aliases
0
alias CVE-2020-5255
1
alias GHSA-mcx4-f5f5-4859
Fixed_packages
0
url pkg:composer/symfony/http-foundation@4.4.7
purl pkg:composer/symfony/http-foundation@4.4.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bhnt-pgq7-yya3
1
vulnerability VCID-gb5q-fyt4-6qgx
2
vulnerability VCID-p6f7-utd6-eqej
3
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-foundation@4.4.7
1
url pkg:composer/symfony/http-foundation@4.4.9
purl pkg:composer/symfony/http-foundation@4.4.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bhnt-pgq7-yya3
1
vulnerability VCID-gb5q-fyt4-6qgx
2
vulnerability VCID-p6f7-utd6-eqej
3
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-foundation@4.4.9
2
url pkg:composer/symfony/http-foundation@5.0.7
purl pkg:composer/symfony/http-foundation@5.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bhnt-pgq7-yya3
1
vulnerability VCID-p6f7-utd6-eqej
2
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-foundation@5.0.7
3
url pkg:composer/symfony/http-foundation@5.0.9
purl pkg:composer/symfony/http-foundation@5.0.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bhnt-pgq7-yya3
1
vulnerability VCID-p6f7-utd6-eqej
2
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-foundation@5.0.9
4
url pkg:composer/symfony/symfony@4.4.7
purl pkg:composer/symfony/symfony@4.4.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-15tu-dfam-yqgh
1
vulnerability VCID-4f9e-eg67-cqbr
2
vulnerability VCID-4nx8-hnsf-mych
3
vulnerability VCID-91hk-tdtv-x7fp
4
vulnerability VCID-bhnt-pgq7-yya3
5
vulnerability VCID-c3qr-9rv2-yqh9
6
vulnerability VCID-f2w1-nvm5-rub3
7
vulnerability VCID-gb5q-fyt4-6qgx
8
vulnerability VCID-m9e2-rg83-d7eb
9
vulnerability VCID-p6f7-utd6-eqej
10
vulnerability VCID-pj86-ync3-gyan
11
vulnerability VCID-yetr-unnz-gbhn
12
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/symfony@4.4.7
5
url pkg:composer/symfony/symfony@5.0.7
purl pkg:composer/symfony/symfony@5.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-15tu-dfam-yqgh
1
vulnerability VCID-4f9e-eg67-cqbr
2
vulnerability VCID-4nx8-hnsf-mych
3
vulnerability VCID-91hk-tdtv-x7fp
4
vulnerability VCID-bhnt-pgq7-yya3
5
vulnerability VCID-c3qr-9rv2-yqh9
6
vulnerability VCID-f2w1-nvm5-rub3
7
vulnerability VCID-m9e2-rg83-d7eb
8
vulnerability VCID-p6f7-utd6-eqej
9
vulnerability VCID-pj86-ync3-gyan
10
vulnerability VCID-yetr-unnz-gbhn
11
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/symfony@5.0.7
6
url pkg:deb/debian/symfony@4.4.8-1?distro=trixie
purl pkg:deb/debian/symfony@4.4.8-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/symfony@4.4.8-1%3Fdistro=trixie
7
url pkg:deb/debian/symfony@4.4.19%2Bdfsg-2%2Bdeb11u6?distro=trixie
purl pkg:deb/debian/symfony@4.4.19%2Bdfsg-2%2Bdeb11u6?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4av2-4k9f-byb5
1
vulnerability VCID-6v9h-7sk2-cbap
2
vulnerability VCID-7wrn-mbd7-d7ah
3
vulnerability VCID-bhnt-pgq7-yya3
4
vulnerability VCID-duk3-7fw9-xbcq
5
vulnerability VCID-h11w-bz83-wug4
6
vulnerability VCID-jcjs-qt7d-syfb
7
vulnerability VCID-m2u1-mytm-63cx
8
vulnerability VCID-mj2s-4kzv-1ue6
9
vulnerability VCID-p6dz-c7ee-1fg9
10
vulnerability VCID-pdhd-87qs-m7hp
11
vulnerability VCID-phfm-mhxk-fyde
12
vulnerability VCID-puu2-f43k-tbc2
13
vulnerability VCID-qchu-m5ka-nud8
14
vulnerability VCID-r9n1-p36r-zbhy
15
vulnerability VCID-rahf-hzw6-rqgm
16
vulnerability VCID-rfnv-6wry-z7f1
17
vulnerability VCID-wmjm-3p6s-e3am
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/symfony@4.4.19%252Bdfsg-2%252Bdeb11u6%3Fdistro=trixie
8
url pkg:deb/debian/symfony@4.4.19%2Bdfsg-2%2Bdeb11u6
purl pkg:deb/debian/symfony@4.4.19%2Bdfsg-2%2Bdeb11u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4av2-4k9f-byb5
1
vulnerability VCID-6v9h-7sk2-cbap
2
vulnerability VCID-7wrn-mbd7-d7ah
3
vulnerability VCID-bhnt-pgq7-yya3
4
vulnerability VCID-duk3-7fw9-xbcq
5
vulnerability VCID-h11w-bz83-wug4
6
vulnerability VCID-jcjs-qt7d-syfb
7
vulnerability VCID-m2u1-mytm-63cx
8
vulnerability VCID-mj2s-4kzv-1ue6
9
vulnerability VCID-p6dz-c7ee-1fg9
10
vulnerability VCID-pdhd-87qs-m7hp
11
vulnerability VCID-phfm-mhxk-fyde
12
vulnerability VCID-pj86-ync3-gyan
13
vulnerability VCID-puu2-f43k-tbc2
14
vulnerability VCID-qchu-m5ka-nud8
15
vulnerability VCID-r9n1-p36r-zbhy
16
vulnerability VCID-rahf-hzw6-rqgm
17
vulnerability VCID-rfnv-6wry-z7f1
18
vulnerability VCID-wmjm-3p6s-e3am
19
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/symfony@4.4.19%252Bdfsg-2%252Bdeb11u6
9
url pkg:deb/debian/symfony@5.4.23%2Bdfsg-1%2Bdeb12u5?distro=trixie
purl pkg:deb/debian/symfony@5.4.23%2Bdfsg-1%2Bdeb12u5?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-rfnv-6wry-z7f1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/symfony@5.4.23%252Bdfsg-1%252Bdeb12u5%3Fdistro=trixie
10
url pkg:deb/debian/symfony@6.4.21%2Bdfsg-2%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/symfony@6.4.21%2Bdfsg-2%2Bdeb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-rfnv-6wry-z7f1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/symfony@6.4.21%252Bdfsg-2%252Bdeb13u1%3Fdistro=trixie
11
url pkg:deb/debian/symfony@7.4.13%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/symfony@7.4.13%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/symfony@7.4.13%252Bdfsg-1%3Fdistro=trixie
Affected_packages
0
url pkg:composer/symfony/http-foundation@4.4.0
purl pkg:composer/symfony/http-foundation@4.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bhnt-pgq7-yya3
1
vulnerability VCID-dbr2-6b2j-m7hx
2
vulnerability VCID-fpjb-qxpv-nkdc
3
vulnerability VCID-gb5q-fyt4-6qgx
4
vulnerability VCID-p6f7-utd6-eqej
5
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-foundation@4.4.0
1
url pkg:composer/symfony/http-foundation@4.4.1
purl pkg:composer/symfony/http-foundation@4.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bhnt-pgq7-yya3
1
vulnerability VCID-dbr2-6b2j-m7hx
2
vulnerability VCID-fpjb-qxpv-nkdc
3
vulnerability VCID-gb5q-fyt4-6qgx
4
vulnerability VCID-p6f7-utd6-eqej
5
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-foundation@4.4.1
2
url pkg:composer/symfony/http-foundation@4.4.2
purl pkg:composer/symfony/http-foundation@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bhnt-pgq7-yya3
1
vulnerability VCID-dbr2-6b2j-m7hx
2
vulnerability VCID-fpjb-qxpv-nkdc
3
vulnerability VCID-gb5q-fyt4-6qgx
4
vulnerability VCID-p6f7-utd6-eqej
5
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-foundation@4.4.2
3
url pkg:composer/symfony/http-foundation@4.4.3
purl pkg:composer/symfony/http-foundation@4.4.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bhnt-pgq7-yya3
1
vulnerability VCID-dbr2-6b2j-m7hx
2
vulnerability VCID-fpjb-qxpv-nkdc
3
vulnerability VCID-gb5q-fyt4-6qgx
4
vulnerability VCID-p6f7-utd6-eqej
5
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-foundation@4.4.3
4
url pkg:composer/symfony/http-foundation@4.4.4
purl pkg:composer/symfony/http-foundation@4.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bhnt-pgq7-yya3
1
vulnerability VCID-dbr2-6b2j-m7hx
2
vulnerability VCID-gb5q-fyt4-6qgx
3
vulnerability VCID-p6f7-utd6-eqej
4
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-foundation@4.4.4
5
url pkg:composer/symfony/http-foundation@4.4.5
purl pkg:composer/symfony/http-foundation@4.4.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bhnt-pgq7-yya3
1
vulnerability VCID-dbr2-6b2j-m7hx
2
vulnerability VCID-gb5q-fyt4-6qgx
3
vulnerability VCID-p6f7-utd6-eqej
4
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-foundation@4.4.5
6
url pkg:composer/symfony/http-foundation@4.4.6
purl pkg:composer/symfony/http-foundation@4.4.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bhnt-pgq7-yya3
1
vulnerability VCID-dbr2-6b2j-m7hx
2
vulnerability VCID-gb5q-fyt4-6qgx
3
vulnerability VCID-p6f7-utd6-eqej
4
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-foundation@4.4.6
7
url pkg:composer/symfony/http-foundation@5.0.0
purl pkg:composer/symfony/http-foundation@5.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bhnt-pgq7-yya3
1
vulnerability VCID-dbr2-6b2j-m7hx
2
vulnerability VCID-fpjb-qxpv-nkdc
3
vulnerability VCID-p6f7-utd6-eqej
4
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-foundation@5.0.0
8
url pkg:composer/symfony/http-foundation@5.0.1
purl pkg:composer/symfony/http-foundation@5.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bhnt-pgq7-yya3
1
vulnerability VCID-dbr2-6b2j-m7hx
2
vulnerability VCID-fpjb-qxpv-nkdc
3
vulnerability VCID-p6f7-utd6-eqej
4
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-foundation@5.0.1
9
url pkg:composer/symfony/http-foundation@5.0.2
purl pkg:composer/symfony/http-foundation@5.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bhnt-pgq7-yya3
1
vulnerability VCID-dbr2-6b2j-m7hx
2
vulnerability VCID-fpjb-qxpv-nkdc
3
vulnerability VCID-p6f7-utd6-eqej
4
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-foundation@5.0.2
10
url pkg:composer/symfony/http-foundation@5.0.3
purl pkg:composer/symfony/http-foundation@5.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bhnt-pgq7-yya3
1
vulnerability VCID-dbr2-6b2j-m7hx
2
vulnerability VCID-fpjb-qxpv-nkdc
3
vulnerability VCID-p6f7-utd6-eqej
4
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-foundation@5.0.3
11
url pkg:composer/symfony/http-foundation@5.0.4
purl pkg:composer/symfony/http-foundation@5.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bhnt-pgq7-yya3
1
vulnerability VCID-dbr2-6b2j-m7hx
2
vulnerability VCID-p6f7-utd6-eqej
3
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-foundation@5.0.4
12
url pkg:composer/symfony/http-foundation@5.0.5
purl pkg:composer/symfony/http-foundation@5.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bhnt-pgq7-yya3
1
vulnerability VCID-dbr2-6b2j-m7hx
2
vulnerability VCID-p6f7-utd6-eqej
3
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-foundation@5.0.5
13
url pkg:composer/symfony/http-foundation@5.0.6
purl pkg:composer/symfony/http-foundation@5.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bhnt-pgq7-yya3
1
vulnerability VCID-dbr2-6b2j-m7hx
2
vulnerability VCID-p6f7-utd6-eqej
3
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-foundation@5.0.6
14
url pkg:composer/symfony/symfony@4.4.0
purl pkg:composer/symfony/symfony@4.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-15tu-dfam-yqgh
1
vulnerability VCID-4f9e-eg67-cqbr
2
vulnerability VCID-4nx8-hnsf-mych
3
vulnerability VCID-91hk-tdtv-x7fp
4
vulnerability VCID-bhnt-pgq7-yya3
5
vulnerability VCID-c3qr-9rv2-yqh9
6
vulnerability VCID-dbr2-6b2j-m7hx
7
vulnerability VCID-f2w1-nvm5-rub3
8
vulnerability VCID-fpjb-qxpv-nkdc
9
vulnerability VCID-gb5q-fyt4-6qgx
10
vulnerability VCID-k7cd-4ht8-gkeu
11
vulnerability VCID-m9e2-rg83-d7eb
12
vulnerability VCID-p6f7-utd6-eqej
13
vulnerability VCID-pj86-ync3-gyan
14
vulnerability VCID-yetr-unnz-gbhn
15
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/symfony@4.4.0
15
url pkg:composer/symfony/symfony@5.0.0
purl pkg:composer/symfony/symfony@5.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-15tu-dfam-yqgh
1
vulnerability VCID-4f9e-eg67-cqbr
2
vulnerability VCID-4nx8-hnsf-mych
3
vulnerability VCID-91hk-tdtv-x7fp
4
vulnerability VCID-bhnt-pgq7-yya3
5
vulnerability VCID-c3qr-9rv2-yqh9
6
vulnerability VCID-dbr2-6b2j-m7hx
7
vulnerability VCID-f2w1-nvm5-rub3
8
vulnerability VCID-fpjb-qxpv-nkdc
9
vulnerability VCID-gb5q-fyt4-6qgx
10
vulnerability VCID-k7cd-4ht8-gkeu
11
vulnerability VCID-m9e2-rg83-d7eb
12
vulnerability VCID-p6f7-utd6-eqej
13
vulnerability VCID-pj86-ync3-gyan
14
vulnerability VCID-yetr-unnz-gbhn
15
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/symfony@5.0.0
16
url pkg:deb/debian/symfony@1.0.17-4
purl pkg:deb/debian/symfony@1.0.17-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-14k5-2gnt-8qgd
1
vulnerability VCID-1y96-v19f-tkgg
2
vulnerability VCID-23hr-yznx-c3fb
3
vulnerability VCID-37et-21qw-skd7
4
vulnerability VCID-3kvp-hnpd-gbcq
5
vulnerability VCID-3qct-gbgt-kkbb
6
vulnerability VCID-4f9e-eg67-cqbr
7
vulnerability VCID-58kk-nrpx-m3h5
8
vulnerability VCID-5pmg-t1rb-wbd4
9
vulnerability VCID-5vzn-5rbf-e3hb
10
vulnerability VCID-6c6t-kmb3-2qcm
11
vulnerability VCID-7m45-bvbn-4qd3
12
vulnerability VCID-91hk-tdtv-x7fp
13
vulnerability VCID-9m8x-djng-8ye3
14
vulnerability VCID-awma-bc9f-kfe2
15
vulnerability VCID-c3qr-9rv2-yqh9
16
vulnerability VCID-dbr2-6b2j-m7hx
17
vulnerability VCID-djnm-e9r4-c3f5
18
vulnerability VCID-dsbx-q641-4fc7
19
vulnerability VCID-ef86-hqv4-6kaz
20
vulnerability VCID-fpjb-qxpv-nkdc
21
vulnerability VCID-frbz-vpfe-vbh9
22
vulnerability VCID-gb5q-fyt4-6qgx
23
vulnerability VCID-gjuz-mjah-e3bj
24
vulnerability VCID-jqh6-rwsw-73bs
25
vulnerability VCID-k7cd-4ht8-gkeu
26
vulnerability VCID-kktw-gsen-jyd8
27
vulnerability VCID-m9e2-rg83-d7eb
28
vulnerability VCID-mew1-9shg-mugs
29
vulnerability VCID-mtb5-t6y4-w3eb
30
vulnerability VCID-nsuz-7sdv-abef
31
vulnerability VCID-p6f7-utd6-eqej
32
vulnerability VCID-pj86-ync3-gyan
33
vulnerability VCID-qqd1-smb1-sbe8
34
vulnerability VCID-tx26-92jc-rkff
35
vulnerability VCID-ty9b-xe8v-r7ag
36
vulnerability VCID-uk5a-g7em-gygd
37
vulnerability VCID-uuk9-e5qy-rfgf
38
vulnerability VCID-vyug-krcw-jyef
39
vulnerability VCID-wdz4-hfer-1ud1
40
vulnerability VCID-x4nv-gvag-7qf2
41
vulnerability VCID-xdtu-22ad-63aq
42
vulnerability VCID-xj13-fspe-hfgv
43
vulnerability VCID-zeut-9wfp-q7et
44
vulnerability VCID-zf41-1q1a-dug6
45
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/symfony@1.0.17-4
17
url pkg:deb/debian/symfony@2.3.21%2Bdfsg-4
purl pkg:deb/debian/symfony@2.3.21%2Bdfsg-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-14k5-2gnt-8qgd
1
vulnerability VCID-1y96-v19f-tkgg
2
vulnerability VCID-23hr-yznx-c3fb
3
vulnerability VCID-37et-21qw-skd7
4
vulnerability VCID-3kvp-hnpd-gbcq
5
vulnerability VCID-3qct-gbgt-kkbb
6
vulnerability VCID-4f9e-eg67-cqbr
7
vulnerability VCID-6c6t-kmb3-2qcm
8
vulnerability VCID-7m45-bvbn-4qd3
9
vulnerability VCID-91hk-tdtv-x7fp
10
vulnerability VCID-9m8x-djng-8ye3
11
vulnerability VCID-awma-bc9f-kfe2
12
vulnerability VCID-c3qr-9rv2-yqh9
13
vulnerability VCID-dbr2-6b2j-m7hx
14
vulnerability VCID-djnm-e9r4-c3f5
15
vulnerability VCID-dsbx-q641-4fc7
16
vulnerability VCID-ef86-hqv4-6kaz
17
vulnerability VCID-fpjb-qxpv-nkdc
18
vulnerability VCID-frbz-vpfe-vbh9
19
vulnerability VCID-gb5q-fyt4-6qgx
20
vulnerability VCID-gjuz-mjah-e3bj
21
vulnerability VCID-jqh6-rwsw-73bs
22
vulnerability VCID-k7cd-4ht8-gkeu
23
vulnerability VCID-kktw-gsen-jyd8
24
vulnerability VCID-m9e2-rg83-d7eb
25
vulnerability VCID-mew1-9shg-mugs
26
vulnerability VCID-mtb5-t6y4-w3eb
27
vulnerability VCID-nsuz-7sdv-abef
28
vulnerability VCID-p6f7-utd6-eqej
29
vulnerability VCID-pj86-ync3-gyan
30
vulnerability VCID-qqd1-smb1-sbe8
31
vulnerability VCID-tx26-92jc-rkff
32
vulnerability VCID-ty9b-xe8v-r7ag
33
vulnerability VCID-uk5a-g7em-gygd
34
vulnerability VCID-uuk9-e5qy-rfgf
35
vulnerability VCID-vyug-krcw-jyef
36
vulnerability VCID-x4nv-gvag-7qf2
37
vulnerability VCID-xdtu-22ad-63aq
38
vulnerability VCID-xj13-fspe-hfgv
39
vulnerability VCID-zeut-9wfp-q7et
40
vulnerability VCID-zf41-1q1a-dug6
41
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/symfony@2.3.21%252Bdfsg-4
18
url pkg:deb/debian/symfony@2.3.21%2Bdfsg-4%2Bdeb8u3
purl pkg:deb/debian/symfony@2.3.21%2Bdfsg-4%2Bdeb8u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-14k5-2gnt-8qgd
1
vulnerability VCID-1y96-v19f-tkgg
2
vulnerability VCID-23hr-yznx-c3fb
3
vulnerability VCID-37et-21qw-skd7
4
vulnerability VCID-3kvp-hnpd-gbcq
5
vulnerability VCID-3qct-gbgt-kkbb
6
vulnerability VCID-4f9e-eg67-cqbr
7
vulnerability VCID-6c6t-kmb3-2qcm
8
vulnerability VCID-7m45-bvbn-4qd3
9
vulnerability VCID-91hk-tdtv-x7fp
10
vulnerability VCID-9m8x-djng-8ye3
11
vulnerability VCID-awma-bc9f-kfe2
12
vulnerability VCID-c3qr-9rv2-yqh9
13
vulnerability VCID-dbr2-6b2j-m7hx
14
vulnerability VCID-djnm-e9r4-c3f5
15
vulnerability VCID-dsbx-q641-4fc7
16
vulnerability VCID-ef86-hqv4-6kaz
17
vulnerability VCID-fpjb-qxpv-nkdc
18
vulnerability VCID-frbz-vpfe-vbh9
19
vulnerability VCID-gb5q-fyt4-6qgx
20
vulnerability VCID-gjuz-mjah-e3bj
21
vulnerability VCID-jqh6-rwsw-73bs
22
vulnerability VCID-k7cd-4ht8-gkeu
23
vulnerability VCID-kktw-gsen-jyd8
24
vulnerability VCID-m9e2-rg83-d7eb
25
vulnerability VCID-mew1-9shg-mugs
26
vulnerability VCID-mtb5-t6y4-w3eb
27
vulnerability VCID-nsuz-7sdv-abef
28
vulnerability VCID-p6f7-utd6-eqej
29
vulnerability VCID-pj86-ync3-gyan
30
vulnerability VCID-qqd1-smb1-sbe8
31
vulnerability VCID-tx26-92jc-rkff
32
vulnerability VCID-ty9b-xe8v-r7ag
33
vulnerability VCID-uk5a-g7em-gygd
34
vulnerability VCID-uuk9-e5qy-rfgf
35
vulnerability VCID-vyug-krcw-jyef
36
vulnerability VCID-x4nv-gvag-7qf2
37
vulnerability VCID-xdtu-22ad-63aq
38
vulnerability VCID-xj13-fspe-hfgv
39
vulnerability VCID-zeut-9wfp-q7et
40
vulnerability VCID-zf41-1q1a-dug6
41
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/symfony@2.3.21%252Bdfsg-4%252Bdeb8u3
19
url pkg:deb/debian/symfony@2.8.7%2Bdfsg-1.3%2Bdeb9u3
purl pkg:deb/debian/symfony@2.8.7%2Bdfsg-1.3%2Bdeb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1y96-v19f-tkgg
1
vulnerability VCID-23hr-yznx-c3fb
2
vulnerability VCID-37et-21qw-skd7
3
vulnerability VCID-3kvp-hnpd-gbcq
4
vulnerability VCID-3qct-gbgt-kkbb
5
vulnerability VCID-4f9e-eg67-cqbr
6
vulnerability VCID-6c6t-kmb3-2qcm
7
vulnerability VCID-7m45-bvbn-4qd3
8
vulnerability VCID-91hk-tdtv-x7fp
9
vulnerability VCID-9m8x-djng-8ye3
10
vulnerability VCID-awma-bc9f-kfe2
11
vulnerability VCID-c3qr-9rv2-yqh9
12
vulnerability VCID-dbr2-6b2j-m7hx
13
vulnerability VCID-djnm-e9r4-c3f5
14
vulnerability VCID-dsbx-q641-4fc7
15
vulnerability VCID-ef86-hqv4-6kaz
16
vulnerability VCID-fpjb-qxpv-nkdc
17
vulnerability VCID-frbz-vpfe-vbh9
18
vulnerability VCID-gb5q-fyt4-6qgx
19
vulnerability VCID-jqh6-rwsw-73bs
20
vulnerability VCID-k7cd-4ht8-gkeu
21
vulnerability VCID-kktw-gsen-jyd8
22
vulnerability VCID-m9e2-rg83-d7eb
23
vulnerability VCID-mew1-9shg-mugs
24
vulnerability VCID-nsuz-7sdv-abef
25
vulnerability VCID-p6f7-utd6-eqej
26
vulnerability VCID-pj86-ync3-gyan
27
vulnerability VCID-qqd1-smb1-sbe8
28
vulnerability VCID-tx26-92jc-rkff
29
vulnerability VCID-uuk9-e5qy-rfgf
30
vulnerability VCID-vyug-krcw-jyef
31
vulnerability VCID-xdtu-22ad-63aq
32
vulnerability VCID-xj13-fspe-hfgv
33
vulnerability VCID-zeut-9wfp-q7et
34
vulnerability VCID-zf41-1q1a-dug6
35
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/symfony@2.8.7%252Bdfsg-1.3%252Bdeb9u3
20
url pkg:deb/debian/symfony@3.4.22%2Bdfsg-2%2Bdeb10u1
purl pkg:deb/debian/symfony@3.4.22%2Bdfsg-2%2Bdeb10u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37et-21qw-skd7
1
vulnerability VCID-3kvp-hnpd-gbcq
2
vulnerability VCID-4f9e-eg67-cqbr
3
vulnerability VCID-91hk-tdtv-x7fp
4
vulnerability VCID-9m8x-djng-8ye3
5
vulnerability VCID-c3qr-9rv2-yqh9
6
vulnerability VCID-dbr2-6b2j-m7hx
7
vulnerability VCID-fpjb-qxpv-nkdc
8
vulnerability VCID-gb5q-fyt4-6qgx
9
vulnerability VCID-jqh6-rwsw-73bs
10
vulnerability VCID-k7cd-4ht8-gkeu
11
vulnerability VCID-kktw-gsen-jyd8
12
vulnerability VCID-m9e2-rg83-d7eb
13
vulnerability VCID-p6f7-utd6-eqej
14
vulnerability VCID-pj86-ync3-gyan
15
vulnerability VCID-zgxf-qxwu-pqf9
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/symfony@3.4.22%252Bdfsg-2%252Bdeb10u1
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-5255
reference_id
reference_type
scores
0
value 0.00374
scoring_system epss
scoring_elements 0.59401
published_at 2026-06-04T12:55:00Z
1
value 0.00374
scoring_system epss
scoring_elements 0.59445
published_at 2026-06-07T12:55:00Z
2
value 0.00374
scoring_system epss
scoring_elements 0.59454
published_at 2026-06-06T12:55:00Z
3
value 0.00374
scoring_system epss
scoring_elements 0.59451
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-5255
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5255
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5255
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-foundation/CVE-2020-5255.yaml
reference_id
reference_type
scores
0
value 2.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-foundation/CVE-2020-5255.yaml
3
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2020-5255.yaml
reference_id
reference_type
scores
0
value 2.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2020-5255.yaml
4
reference_url https://github.com/symfony/symfony/commit/dca343442e6a954f96a2609e7b4e9c21ed6d74e6
reference_id
reference_type
scores
0
value 2.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/symfony/symfony/commit/dca343442e6a954f96a2609e7b4e9c21ed6d74e6
5
reference_url https://github.com/symfony/symfony/security/advisories/GHSA-mcx4-f5f5-4859
reference_id
reference_type
scores
0
value 2.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L
1
value LOW
scoring_system cvssv3.1_qr
scoring_elements
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/symfony/symfony/security/advisories/GHSA-mcx4-f5f5-4859
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C36JLPHUPKDFAX6D5WYFC4ALO2K7RDUQ
reference_id
reference_type
scores
0
value 2.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C36JLPHUPKDFAX6D5WYFC4ALO2K7RDUQ
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C36JLPHUPKDFAX6D5WYFC4ALO2K7RDUQ/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C36JLPHUPKDFAX6D5WYFC4ALO2K7RDUQ/
8
reference_url https://symfony.com/blog/cve-2020-5255-prevent-cache-poisoning-via-a-response-content-type-header
reference_id
reference_type
scores
0
value 2.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://symfony.com/blog/cve-2020-5255-prevent-cache-poisoning-via-a-response-content-type-header
9
reference_url https://symfony.com/cve-2020-5255
reference_id
reference_type
scores
0
value 2.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://symfony.com/cve-2020-5255
10
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=961415
reference_id 961415
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=961415
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-5255
reference_id CVE-2020-5255
reference_type
scores
0
value 2.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-5255
12
reference_url https://github.com/advisories/GHSA-mcx4-f5f5-4859
reference_id GHSA-mcx4-f5f5-4859
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-mcx4-f5f5-4859
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 20
name Improper Input Validation
description The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
3
cwe_id 435
name Improper Interaction Between Multiple Correctly-Behaving Entities
description An interaction error occurs when two entities have correct behavior when running independently of each other, but when they are integrated as components in a larger system or process, they introduce incorrect behaviors that may cause resultant weaknesses.
Exploits
Severity_range_score0.1 - 3
Exploitability0.5
Weighted_severity2.7
Risk_score1.4
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-dbr2-6b2j-m7hx