Search for packages
| purl | pkg:composer/symfony/security-http@3.4.26 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-7q22-x757-cmgc
Aliases: CVE-2024-36611 |
Withdrawn Advisory: Symfony http-security has authentication bypass ## Withdrawn Advisory This advisory has been withdrawn because the report is not … |
Vulnerable |
|
GHSA-6h46-9jf5-q59x
Aliases: CVE-2026-48489 |
Symfony: Security Firewall Bypass via failure_forward Subrequest: Unauthenticated Access to access_control-Protected GET Routes ### Description When a firewall is configured … |
Vulnerable |
|
GHSA-ph86-p8f6-f9r2
Aliases: CVE-2026-45063 |
Symfony Vulnerable to Identity Spoofing via Unanchored DN Regex in X509Authenticator ### Description `X509Authenticator` implements client-certificate (mTLS) authentication: the web … |
Vulnerable |
|
CVE-2021-21424
Aliases: GHSA-5pv8-ppvj-4h68 |
Information Exposure Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The … |
Vulnerable Vulnerable |
|
CVE-2023-46734
Aliases: GHSA-q847-2q57-wmr3 |
Cross-site scripting Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting … |
Vulnerable Vulnerable Vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2019-10911
|
Improper Authentication In Symfony, a vulnerability would allow an attacker to authenticate as a privileged user on sites with user … | |
|
GHSA-cchx-mfrc-fwqr
|
Improper authentication in Symfony In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before … |
CVE-2019-10911
|