Search for packages
| purl | pkg:composer/symfony/http-foundation@4.4.2 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-3rg7-wf37-54rm
Aliases: CVE-2025-64500 |
Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass ### Description The `Request` class improperly interprets some `PATH_INFO` … |
Vulnerable |
|
GHSA-mrqx-rp3w-jpjp
Aliases: CVE-2024-50345 |
Symfony vulnerable to open redirect via browser-sanitized URLs ### Description The `Request` class, does not parse URI with special characters … |
Vulnerable |
|
GHSA-mcx4-f5f5-4859
Aliases: CVE-2020-5255 |
Prevent cache poisoning via a Response Content-Type header in Symfony Description ----------- When a `Response` does not contain a `Content-Type` … |
Vulnerable |
|
CVE-2020-15094
Aliases: GHSA-754h-5r27-7x3r |
Improper Cross-boundary Removal of Sensitive Data In Symfony, the CachingHttpClient class from the HttpClient Symfony component relies on the HttpCache … |
Vulnerable Vulnerable |
|
CVE-2021-21424
Aliases: GHSA-5pv8-ppvj-4h68 |
Information Exposure Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The … |
Vulnerable Vulnerable |
|
CVE-2020-5274
Aliases: GHSA-m884-279h-32v2 |
Information Exposure Through an Error Message In Symfony, some properties of the `Exception` were not properly escaped when the `ErrorHandler` … |
Vulnerable Vulnerable |
|
GHSA-r925-mgvr-h9cc
Aliases: CVE-2026-108082 |
Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header ### Description `HeaderUtils::split()` parsed header values with a pattern whose … |
Not vulnerable |