VulnerableCode Package Details - pkg:composer/symfony/http-kernel@5.1.4

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:composer/symfony/http-kernel@5.1.4

purl	pkg:composer/symfony/http-kernel@5.1.4

Next non-vulnerable version	5.4.20
Latest non-vulnerable version	8.0.12
Risk score	3.6

Vulnerabilities affecting this package (4)

Advisory	Summary	Fixed in package version
GHSA-h7vf-5wrv-9fhv Aliases: CVE-2022-24894 GMS-2023-209	Symfony storing cookie headers in HttpCache Description ----------- The Symfony HTTP cache system acts as a reverse proxy: it caches …	5.4.20 Not vulnerable
GHSA-754h-5r27-7x3r Aliases: CVE-2020-15094	RCE in Symfony Description ----------- The `CachingHttpClient` class from the HttpClient Symfony component relies on the `HttpCache` class to handle …	5.1.5 Vulnerable
CVE-2020-15094 Aliases: GHSA-754h-5r27-7x3r	Improper Cross-boundary Removal of Sensitive Data In Symfony, the CachingHttpClient class from the HttpClient Symfony component relies on the HttpCache …	4.4.13 Vulnerable 5.1.5 Vulnerable
CVE-2021-21424 Aliases: GHSA-5pv8-ppvj-4h68	Information Exposure Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The …	5.2.8 Vulnerable 3.4.48 Vulnerable 4.4.23 Vulnerable

This package is not known to fix any advisories.