Search for packages
Package details: pkg:composer/symfony/phpunit-bridge@2.8.50
purl pkg:composer/symfony/phpunit-bridge@2.8.50
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-g1yv-sk44-n3fu Deserialization of untrusted data in Symfony In Symfony before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, it is possible to cache objects that may contain bad user input. On serialization or unserialization, this could result in the deletion of files that the current user has access to. This is related to symfony/cache and symfony/phpunit-bridge. CVE-2019-10912
GHSA-w2fr-65vp-mxw3

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-01T18:11:38.483342+00:00 GitLab Importer Fixing VCID-g1yv-sk44-n3fu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/symfony/phpunit-bridge/CVE-2019-10912.yml 36.1.3
2025-07-01T14:30:03.851318+00:00 GHSA Importer Fixing VCID-g1yv-sk44-n3fu https://github.com/advisories/GHSA-w2fr-65vp-mxw3 36.1.3
2025-07-01T12:17:01.569794+00:00 GithubOSV Importer Fixing VCID-g1yv-sk44-n3fu https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/02/GHSA-w2fr-65vp-mxw3/GHSA-w2fr-65vp-mxw3.json 36.1.3