Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/security-bundle@7.0.10
purl pkg:composer/symfony/security-bundle@7.0.10
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-pdcr-fsbk-63bx Symfony's `Security::login` does not take into account custom `user_checker` ### Description The custom `user_checker` defined on a firewall is not called when Login Programmaticaly with the `Security::login` method, leading to unwanted login. ### Resolution The `Security::login` method now ensure to call the configured `user_checker`. The patch for this issue is available [here](https://github.com/symfony/symfony/commit/22a0789a0085c3ee96f4ef715ecad8255cf0e105) for branch 6.4. ### Credits We would like to thank Oleg Andreyev, Antoine MAKDESSI for reporting the issue and Christian Flothmann for providing the fix. CVE-2024-50341
GHSA-jxgr-3v7q-3w9v

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T23:13:23.829766+00:00 GitLab Importer Fixing VCID-pdcr-fsbk-63bx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/symfony/security-bundle/CVE-2024-50341.yml 38.4.0
2026-04-12T00:31:54.160372+00:00 GitLab Importer Fixing VCID-pdcr-fsbk-63bx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/symfony/security-bundle/CVE-2024-50341.yml 38.3.0
2026-04-07T04:56:20.527370+00:00 GHSA Importer Fixing VCID-pdcr-fsbk-63bx https://github.com/advisories/GHSA-jxgr-3v7q-3w9v 38.1.0
2026-04-03T00:39:37.847978+00:00 GitLab Importer Fixing VCID-pdcr-fsbk-63bx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/symfony/security-bundle/CVE-2024-50341.yml 38.1.0
2026-04-02T12:40:20.832134+00:00 GitLab Importer Fixing VCID-pdcr-fsbk-63bx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/symfony/security-bundle/CVE-2024-50341.yml 38.0.0
2026-04-01T12:51:14.641002+00:00 GithubOSV Importer Fixing VCID-pdcr-fsbk-63bx https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/11/GHSA-jxgr-3v7q-3w9v/GHSA-jxgr-3v7q-3w9v.json 38.0.0