VulnerableCode Package Details - pkg:composer/symfony/framework-bundle@4.1.0-BETA2

Search for packages

Package details: pkg:composer/symfony/framework-bundle@4.1.0-BETA2

Essentials
History (1)

purl	pkg:composer/symfony/framework-bundle@4.1.0-BETA2
Tags	Ghost

Next non-vulnerable version	None.
Latest non-vulnerable version	None.
Risk	3.1

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-nptm-yjp6-5bd9 Aliases: CVE-2019-10909 GHSA-g996-q5r8-w7g2	Symfony Cross-site Scripting (XSS) vulnerability In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, validation messages are not escaped, which can lead to XSS when user input is included. This is related to symfony/framework-bundle.	4.1.12 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 4.2.7 Affected by 0 other vulnerabilities.

Vulnerability

Summary

Fixed by

VCID-nptm-yjp6-5bd9
Aliases:
CVE-2019-10909
GHSA-g996-q5r8-w7g2

Symfony Cross-site Scripting (XSS) vulnerability In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, validation messages are not escaped, which can lead to XSS when user input is included. This is related to symfony/framework-bundle.

4.1.12
Affected by 1 other vulnerability.

4.2.7
Affected by 0 other vulnerabilities.

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-08-01T09:22:10.254332+00:00	GitLab Importer	Affected by	VCID-nptm-yjp6-5bd9	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/symfony/framework-bundle/CVE-2019-10909.yml	37.0.0