Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/http-client@5.4.26
purl pkg:composer/symfony/http-client@5.4.26
Next non-vulnerable version 5.4.53
Latest non-vulnerable version 7.1.8
Risk score 2.9
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-9c3x-r3wp-mgxm
Aliases:
CVE-2024-50342
Symfony allows internal address and port enumeration by NoPrivateNetworkHttpClient ### Description When using the `NoPrivateNetworkHttpClient`, some internal information is still …
5.4.47
Vulnerable
GHSA-38cx-cq6f-5755
Aliases:
CVE-2026-48736
Symfony: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms (6to4, NAT64, Teredo, IPv4-compatible): SSRF Bypass in NoPrivateNetworkHttpClient ### Description `Symfony\Component\HttpClient\NoPrivateNetworkHttpClient` is documented as …
5.4.53
Not vulnerable
This package is not known to fix any advisories.