VulnerableCode Package Details - pkg:composer/symfony/cache@4.3.5

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:composer/symfony/cache@4.3.5

Essentials

purl	pkg:composer/symfony/cache@4.3.5

Next non-vulnerable version	5.4.52
Latest non-vulnerable version	8.0.12
Risk score	4.4

Vulnerabilities affecting this package (3)

Advisory	Summary	Fixed in package version
GHSA-79gr-58r3-pwm3 Aliases: CVE-2019-18889	Symfony Unsafe Cache Serialization Could Enable RCE An issue was discovered in Symfony 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and …	4.3.8 Vulnerable
GHSA-6qh9-h6wf-jgqc Aliases: CVE-2026-45073	Symfony Vulnerable to SQL Injection in PdoAdapter::doClear() via Unsanitized $prefix ### Description `Symfony\Component\Cache\Adapter\PdoAdapter` is the PDO-backed cache adapter. Its `clear($prefix)` …	5.4.52 Not vulnerable
CVE-2019-18889	Injection Vulnerability An issue was discovered in Symfony. Serializing certain cache adapter interfaces could result in remote code injection. This …	4.2.12 Vulnerable 4.3.8 Vulnerable 3.4.0 Vulnerable

Advisory

Summary

Fixed in package version

GHSA-79gr-58r3-pwm3
Aliases:
CVE-2019-18889

Symfony Unsafe Cache Serialization Could Enable RCE An issue was discovered in Symfony 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and …

4.3.8
Vulnerable

GHSA-6qh9-h6wf-jgqc
Aliases:
CVE-2026-45073

Symfony Vulnerable to SQL Injection in PdoAdapter::doClear() via Unsanitized $prefix ### Description `Symfony\Component\Cache\Adapter\PdoAdapter` is the PDO-backed cache adapter. Its `clear($prefix)` …

5.4.52
Not vulnerable

CVE-2019-18889

Injection Vulnerability An issue was discovered in Symfony. Serializing certain cache adapter interfaces could result in remote code injection. This …

4.2.12
Vulnerable

4.3.8
Vulnerable

3.4.0
Vulnerable

This package is not known to fix any advisories.