Search for packages
| purl | pkg:composer/symfony/framework-bundle@3.4.26 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-2mrq-kxn3-tyc9 | Symfony Cross-site Scripting (XSS) vulnerability In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, validation messages are not escaped, which can lead to XSS when user input is included. This is related to symfony/framework-bundle. |
CVE-2019-10909
GHSA-g996-q5r8-w7g2 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-07-01T12:22:11.085145+00:00 | GithubOSV Importer | Fixing | VCID-2mrq-kxn3-tyc9 | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2019/11/GHSA-g996-q5r8-w7g2/GHSA-g996-q5r8-w7g2.json | 36.1.3 |