Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/http-kernel@3.4.35
purl pkg:composer/symfony/http-kernel@3.4.35
Next non-vulnerable version 4.4.50
Latest non-vulnerable version 8.0.12
Risk score 2.6
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-h7vf-5wrv-9fhv
Aliases:
CVE-2022-24894
GMS-2023-209
Symfony storing cookie headers in HttpCache Description ----------- The Symfony HTTP cache system acts as a reverse proxy: it caches …
4.4.50
Not vulnerable
CVE-2021-21424
Aliases:
GHSA-5pv8-ppvj-4h68
Information Exposure Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The …
5.2.8
Vulnerable
3.4.48
Vulnerable
4.4.23
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-q8hg-pf8v-cxrv
Symfony Http-Kernel has non-constant time comparison in UriSigner When checking the signature of an URI (an ESI fragment URL for … CVE-2019-18887