Search for packages
Package details: pkg:composer/symfony/dependency-injection@4.2.7
purl pkg:composer/symfony/dependency-injection@4.2.7
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-3afm-66r3-c3by Symfony Service IDs Allow Injection In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, when service ids allow user input, this could allow for SQL Injection and remote code execution. This is related to symfony/dependency-injection. CVE-2019-10910
GHSA-pgwj-prpq-jpc2

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-01T14:29:57.895434+00:00 GHSA Importer Fixing VCID-3afm-66r3-c3by https://github.com/advisories/GHSA-pgwj-prpq-jpc2 36.1.3
2025-07-01T12:22:11.513469+00:00 GithubOSV Importer Fixing VCID-3afm-66r3-c3by https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2019/11/GHSA-pgwj-prpq-jpc2/GHSA-pgwj-prpq-jpc2.json 36.1.3