Search for packages
Package details: pkg:composer/symfony/security-http@4.2.12
purl pkg:composer/symfony/security-http@4.2.12
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-cejg-3hqv-kbfd User enumeration leak using switch user functionality in Symfony An issue was discovered in Symfony 4.2.0 to 4.2.11 and 4.3.0 to 4.3.7. The ability to enumerate users was possible due to different handling depending on whether the user existed when making unauthorized attempts to use the switch users functionality. This is related to symfony/security. CVE-2019-18886
GHSA-4vpc-5jx4-cfqg

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-01T14:29:59.028944+00:00 GHSA Importer Fixing VCID-cejg-3hqv-kbfd https://github.com/advisories/GHSA-4vpc-5jx4-cfqg 36.1.3
2025-07-01T12:21:54.000360+00:00 GithubOSV Importer Fixing VCID-cejg-3hqv-kbfd https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2019/12/GHSA-4vpc-5jx4-cfqg/GHSA-4vpc-5jx4-cfqg.json 36.1.3