Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/http-client@5.4.47
purl pkg:composer/symfony/http-client@5.4.47
Next non-vulnerable version 5.4.53
Latest non-vulnerable version 7.1.8
Risk score 2.9
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-38cx-cq6f-5755
Aliases:
CVE-2026-48736
Symfony: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms (6to4, NAT64, Teredo, IPv4-compatible): SSRF Bypass in NoPrivateNetworkHttpClient ### Description `Symfony\Component\HttpClient\NoPrivateNetworkHttpClient` is documented as …
5.4.53
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-9c3x-r3wp-mgxm
Symfony allows internal address and port enumeration by NoPrivateNetworkHttpClient ### Description When using the `NoPrivateNetworkHttpClient`, some internal information is still … CVE-2024-50342