VulnerableCode Package Details - pkg:composer/symfony/http-client@5.1.1

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:composer/symfony/http-client@5.1.1

Essentials

purl	pkg:composer/symfony/http-client@5.1.1

Next non-vulnerable version	5.4.53
Latest non-vulnerable version	7.1.8
Risk score	1.4

Vulnerabilities affecting this package (2)

Advisory	Summary	Fixed in package version
GHSA-9c3x-r3wp-mgxm Aliases: CVE-2024-50342	Symfony allows internal address and port enumeration by NoPrivateNetworkHttpClient ### Description When using the `NoPrivateNetworkHttpClient`, some internal information is still …	5.4.47 Vulnerable
CVE-2020-15094 Aliases: GHSA-754h-5r27-7x3r	Improper Cross-boundary Removal of Sensitive Data In Symfony, the `CachingHttpClient` class from the HttpClient Symfony component relies on the `HttpCache` …	4.4.13 Vulnerable 5.1.5 Vulnerable

Advisory

Summary

Fixed in package version

GHSA-9c3x-r3wp-mgxm
Aliases:
CVE-2024-50342

Symfony allows internal address and port enumeration by NoPrivateNetworkHttpClient ### Description When using the `NoPrivateNetworkHttpClient`, some internal information is still …

5.4.47
Vulnerable

CVE-2020-15094
Aliases:
GHSA-754h-5r27-7x3r

Improper Cross-boundary Removal of Sensitive Data In Symfony, the `CachingHttpClient` class from the HttpClient Symfony component relies on the `HttpCache` …

4.4.13
Vulnerable

5.1.5
Vulnerable

This package is not known to fix any advisories.