Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/http-foundation@2.6.7
purl pkg:composer/symfony/http-foundation@2.6.7
Next non-vulnerable version 5.4.54
Latest non-vulnerable version 8.1.7
Risk score 3.4
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
GHSA-3rg7-wf37-54rm
Aliases:
CVE-2025-64500
Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass ### Description The `Request` class improperly interprets some `PATH_INFO` …
5.4.50
Vulnerable
GHSA-xhh6-956q-4q69
Aliases:
CVE-2019-18888
Argument injection in a MimeTypeGuesser in Symfony An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 …
2.8.52
Vulnerable
GHSA-mrqx-rp3w-jpjp
Aliases:
CVE-2024-50345
Symfony vulnerable to open redirect via browser-sanitized URLs ### Description The `Request` class, does not parse URI with special characters …
5.4.46
Vulnerable
CVE-2018-11386

Insufficient Session Expiration The `PDOSessionHandler` class allows storing sessions on a PDO connection. Under some configurations and with a well-crafted …
2.8.41
Vulnerable
3.4.11
Vulnerable
4.0.11
Vulnerable
CVE-2018-14773

URL Rewrite vulnerability An issue in Symfony arises from support for a (legacy) IIS header that lets users override the …
2.8.44
Vulnerable
3.4.14
Vulnerable
4.0.14
Vulnerable
4.1.3
Vulnerable
This package is not known to fix any advisories.