VulnerableCode Package Details - pkg:composer/symfony/http-kernel@7.4.0

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:composer/symfony/http-kernel@7.4.0

Essentials

purl	pkg:composer/symfony/http-kernel@7.4.0

Next non-vulnerable version	7.4.12
Latest non-vulnerable version	8.0.12
Risk score	3.9

Vulnerabilities affecting this package (1)

Advisory	Summary	Fixed in package version
GHSA-6439-2f28-8p8q Aliases: CVE-2026-45075	Symfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid] ### Description Symfony's `#[IsGranted('...')]`, `#[IsSignatureValid]`, and `#[IsCsrfTokenValid(...)]` …	7.4.12 Not vulnerable 7.4.12 Not vulnerable

Advisory

Summary

Fixed in package version

GHSA-6439-2f28-8p8q
Aliases:
CVE-2026-45075

Symfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid] ### Description Symfony's `#[IsGranted('...')]`, `#[IsSignatureValid]`, and `#[IsCsrfTokenValid(...)]` …

7.4.12
Not vulnerable

This package is not known to fix any advisories.