Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/form@4.0.4
purl pkg:composer/symfony/form@4.0.4
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.4
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
CVE-2021-21424
Aliases:
GHSA-5pv8-ppvj-4h68
Information Exposure Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The …
4.4.24
Vulnerable
5.2.8
Vulnerable
CVE-2018-19789

Unrestricted Upload of File with Dangerous Type When using the scalar type hint `string` in a setter method (e.g. `setName(string …
2.7.50
Vulnerable
2.8.49
Vulnerable
3.4.20
Vulnerable
4.0.15
Vulnerable
4.1.9
Vulnerable
4.2.1
Vulnerable
GHSA-x3cf-w64x-4cp2
Aliases:
CVE-2018-19789
Symfony Path Disclosure An issue was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before …
4.0.15
Vulnerable
4.0.15
Vulnerable
CVE-2022-23601
Aliases:
GHSA-vvmr-8829-6whx
Cross-Site Request Forgery (CSRF) Symfony is a PHP framework for web and console applications and a set of reusable PHP … There are no reported fixed by versions.
CVE-2022-24894
Aliases:
GHSA-h7vf-5wrv-9fhv
Improper Authorization Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The …
5.4.2
Vulnerable
5.4.2
Vulnerable
This package is not known to fix any advisories.