Search for packages
| purl | pkg:composer/symfony/http-foundation@2.7.39 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-3rg7-wf37-54rm
Aliases: CVE-2025-64500 |
Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass ### Description The `Request` class improperly interprets some `PATH_INFO` … |
Vulnerable |
|
GHSA-8wgj-6wx8-h5hq
Aliases: CVE-2018-14773 |
Symfony HTTP Foundation web cache poisoning An issue was discovered in Http Foundation in Symfony 2.7.0 through 2.7.48, 2.8.0 through … |
Vulnerable |
|
GHSA-xhh6-956q-4q69
Aliases: CVE-2019-18888 |
Argument injection in a MimeTypeGuesser in Symfony An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 … |
Vulnerable |
|
GHSA-mrqx-rp3w-jpjp
Aliases: CVE-2024-50345 |
Symfony vulnerable to open redirect via browser-sanitized URLs ### Description The `Request` class, does not parse URI with special characters … |
Vulnerable |
|
CVE-2018-11386
|
Insufficient Session Expiration The `PDOSessionHandler` class allows storing sessions on a PDO connection. Under some configurations and with a well-crafted … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2018-14773
|
URL Rewrite vulnerability An issue in Symfony arises from support for a (legacy) IIS header that lets users override the … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2019-10913
|
SQL Injection In Symfony HTTP Methods provided as verbs or using the override header may be treated as trusted input, … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-r2rq-3h56-fqm4
Aliases: CVE-2018-11386 |
Symfony DoS An issue was discovered in the HttpFoundation component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before … |
Vulnerable Vulnerable |
|
GHSA-x92h-wmg2-6hp7
Aliases: CVE-2019-10913 |
Invalid HTTP method overrides allow possible XSS or other attacks in Symfony In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x … |
Vulnerable Vulnerable |