Search for packages
Package details: pkg:composer/symfony/symfony@2.8.50
purl pkg:composer/symfony/symfony@2.8.50
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (5)
Vulnerability Summary Aliases
VCID-2mrq-kxn3-tyc9 Symfony Cross-site Scripting (XSS) vulnerability In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, validation messages are not escaped, which can lead to XSS when user input is included. This is related to symfony/framework-bundle. CVE-2019-10909
GHSA-g996-q5r8-w7g2
VCID-3afm-66r3-c3by Symfony Service IDs Allow Injection In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, when service ids allow user input, this could allow for SQL Injection and remote code execution. This is related to symfony/dependency-injection. CVE-2019-10910
GHSA-pgwj-prpq-jpc2
VCID-9x61-7xns-b7h1 Improper authentication in Symfony In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, a vulnerability would allow an attacker to authenticate as a privileged user on sites with user registration and remember me login functionality enabled. This is related to symfony/security. CVE-2019-10911
GHSA-cchx-mfrc-fwqr
VCID-bnwq-cmt5-7qcr Invalid HTTP method overrides allow possible XSS or other attacks in Symfony In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, HTTP Methods provided as verbs or using the override header may be treated as trusted input, but they are not validated, possibly causing SQL injection or XSS. This is related to symfony/http-foundation. CVE-2019-10913
GHSA-x92h-wmg2-6hp7
VCID-g1yv-sk44-n3fu Deserialization of untrusted data in Symfony In Symfony before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, it is possible to cache objects that may contain bad user input. On serialization or unserialization, this could result in the deletion of files that the current user has access to. This is related to symfony/cache and symfony/phpunit-bridge. CVE-2019-10912
GHSA-w2fr-65vp-mxw3

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-01T12:22:11.795420+00:00 GithubOSV Importer Fixing VCID-3afm-66r3-c3by https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2019/11/GHSA-pgwj-prpq-jpc2/GHSA-pgwj-prpq-jpc2.json 36.1.3
2025-07-01T12:22:10.863926+00:00 GithubOSV Importer Fixing VCID-2mrq-kxn3-tyc9 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2019/11/GHSA-g996-q5r8-w7g2/GHSA-g996-q5r8-w7g2.json 36.1.3
2025-07-01T12:21:56.449485+00:00 GithubOSV Importer Fixing VCID-bnwq-cmt5-7qcr https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2019/12/GHSA-x92h-wmg2-6hp7/GHSA-x92h-wmg2-6hp7.json 36.1.3
2025-07-01T12:17:01.929100+00:00 GithubOSV Importer Fixing VCID-g1yv-sk44-n3fu https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/02/GHSA-w2fr-65vp-mxw3/GHSA-w2fr-65vp-mxw3.json 36.1.3
2025-07-01T12:17:00.632452+00:00 GithubOSV Importer Fixing VCID-9x61-7xns-b7h1 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/02/GHSA-cchx-mfrc-fwqr/GHSA-cchx-mfrc-fwqr.json 36.1.3