Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/http-foundation@5.4.50
purl pkg:composer/symfony/http-foundation@5.4.50
Next non-vulnerable version 5.4.54
Latest non-vulnerable version 8.1.7
Risk score 3.9
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-r925-mgvr-h9cc
Aliases:
CVE-2026-108082
Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header ### Description `HeaderUtils::split()` parsed header values with a pattern whose …
5.4.54
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-3rg7-wf37-54rm
Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass ### Description The `Request` class improperly interprets some `PATH_INFO` … CVE-2025-64500