VulnerableCode Package Details - pkg:composer/symfony/security-http@4.4.24

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:composer/symfony/security-http@4.4.24

Essentials

purl	pkg:composer/symfony/security-http@4.4.24

Next non-vulnerable version	7.4.13
Latest non-vulnerable version	8.0.13
Risk score	3.9

Vulnerabilities affecting this package (4)

Advisory	Summary	Fixed in package version
GHSA-7q22-x757-cmgc Aliases: CVE-2024-36611	Withdrawn Advisory: Symfony http-security has authentication bypass ## Withdrawn Advisory This advisory has been withdrawn because the report is not …	7.1.0 Vulnerable
GHSA-6h46-9jf5-q59x Aliases: CVE-2026-48489	Symfony: Security Firewall Bypass via failure_forward Subrequest: Unauthenticated Access to access_control-Protected GET Routes ### Description When a firewall is configured …	5.4.53 Vulnerable
GHSA-ph86-p8f6-f9r2 Aliases: CVE-2026-45063	Symfony Vulnerable to Identity Spoofing via Unanchored DN Regex in X509Authenticator ### Description `X509Authenticator` implements client-certificate (mTLS) authentication: the web …	5.4.52 Vulnerable
CVE-2023-46734 Aliases: GHSA-q847-2q57-wmr3	Cross-site scripting Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting …	5.4.31 Vulnerable 6.3.8 Vulnerable 5.4.31 Vulnerable 6.3.8 Vulnerable

Vulnerabilities fixed by this package (1)

Advisory	Summary	Aliases
CVE-2021-21424	Information Exposure Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The …	GHSA-5pv8-ppvj-4h68