VulnerableCode Package Details - pkg:composer/symfony/http-foundation@3.4.27

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:composer/symfony/http-foundation@3.4.27

purl	pkg:composer/symfony/http-foundation@3.4.27

Next non-vulnerable version	5.4.54
Latest non-vulnerable version	8.1.7
Risk score	3.4

Vulnerabilities affecting this package (4)

Advisory	Summary	Fixed in package version
GHSA-3rg7-wf37-54rm Aliases: CVE-2025-64500	Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass ### Description The `Request` class improperly interprets some `PATH_INFO` …	5.4.50 Vulnerable
GHSA-xhh6-956q-4q69 Aliases: CVE-2019-18888	Argument injection in a MimeTypeGuesser in Symfony An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 …	3.4.35 Vulnerable
GHSA-mrqx-rp3w-jpjp Aliases: CVE-2024-50345	Symfony vulnerable to open redirect via browser-sanitized URLs ### Description The `Request` class, does not parse URI with special characters …	5.4.46 Vulnerable
CVE-2021-21424 Aliases: GHSA-5pv8-ppvj-4h68	Information Exposure Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The …	5.2.8 Vulnerable 4.4.23 Vulnerable

This package is not known to fix any advisories.