Search for packages
| purl | pkg:composer/symfony/cache@3.1.3 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-79gr-58r3-pwm3
Aliases: CVE-2019-18889 |
Symfony Unsafe Cache Serialization Could Enable RCE An issue was discovered in Symfony 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and … |
Vulnerable |
|
GHSA-6qh9-h6wf-jgqc
Aliases: CVE-2026-45073 |
Symfony Vulnerable to SQL Injection in PdoAdapter::doClear() via Unsanitized $prefix ### Description `Symfony\Component\Cache\Adapter\PdoAdapter` is the PDO-backed cache adapter. Its `clear($prefix)` … |
Not vulnerable |
|
CVE-2019-18889
|
Injection Vulnerability An issue was discovered in Symfony. Serializing certain cache adapter interfaces could result in remote code injection. This … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2019-10912
|
Deserialization of Untrusted Data In Symfony it is possible to cache objects that may contain bad user input. On serialization … |
Vulnerable Vulnerable |
|
GHSA-w2fr-65vp-mxw3
Aliases: CVE-2019-10912 |
Deserialization of untrusted data in Symfony In Symfony before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, … |
Vulnerable Vulnerable |