Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/form@4.2.1
purl pkg:composer/symfony/form@4.2.1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2021-21424
Aliases:
GHSA-5pv8-ppvj-4h68
Information Exposure Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The …
4.4.24
Vulnerable
5.2.8
Vulnerable
CVE-2022-23601
Aliases:
GHSA-vvmr-8829-6whx
Cross-Site Request Forgery (CSRF) Symfony is a PHP framework for web and console applications and a set of reusable PHP … There are no reported fixed by versions.
CVE-2022-24894
Aliases:
GHSA-h7vf-5wrv-9fhv
Improper Authorization Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The …
5.4.2
Vulnerable
5.4.2
Vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
CVE-2018-19789
Unrestricted Upload of File with Dangerous Type When using the scalar type hint `string` in a setter method (e.g. `setName(string …
GHSA-x3cf-w64x-4cp2
Symfony Path Disclosure An issue was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before … CVE-2018-19789