Search for packages
| purl | pkg:composer/symfony/http-foundation@3.4.30 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-3rg7-wf37-54rm
Aliases: CVE-2025-64500 |
Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass ### Description The `Request` class improperly interprets some `PATH_INFO` … |
Vulnerable |
|
GHSA-xhh6-956q-4q69
Aliases: CVE-2019-18888 |
Argument injection in a MimeTypeGuesser in Symfony An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 … |
Vulnerable |
|
GHSA-mrqx-rp3w-jpjp
Aliases: CVE-2024-50345 |
Symfony vulnerable to open redirect via browser-sanitized URLs ### Description The `Request` class, does not parse URI with special characters … |
Vulnerable |
|
CVE-2021-21424
Aliases: GHSA-5pv8-ppvj-4h68 |
Information Exposure Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The … |
Vulnerable Vulnerable |