Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/security@2.7.51
purl pkg:composer/symfony/security@2.7.51
Next non-vulnerable version 3.4.49
Latest non-vulnerable version 4.4.24
Risk score
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2016-4423

CVE-2016-4423: Large username storage in session The attemptAuthentication function in `Component/Security/Http/Firewall/UsernamePasswordFormAuthenticationListener.php` does not limit the length of a username stored …
2.8.6
Vulnerable
3.0.6
Vulnerable
2.3.41
Vulnerable
CVE-2018-11406

Cross-Site Request Forgery (CSRF) By default, a user's session is invalidated when the user is logged out. This behavior can …
2.8.41
Vulnerable
3.4.11
Vulnerable
4.0.11
Vulnerable
CVE-2018-11385

Session Fixation A session fixation vulnerability within the `Guard` login feature may allow an attacker to impersonate a victim towards …
2.8.41
Vulnerable
3.4.11
Vulnerable
4.0.11
Vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
CVE-2019-10911
Improper Authentication In Symfony, a vulnerability would allow an attacker to authenticate as a privileged user on sites with user …
GHSA-cchx-mfrc-fwqr
Improper authentication in Symfony In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before … CVE-2019-10911