Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/mime@4.3.7
purl pkg:composer/symfony/mime@4.3.7
Next non-vulnerable version 5.4.52
Latest non-vulnerable version 8.0.12
Risk score 3.4
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-xhh6-956q-4q69
Aliases:
CVE-2019-18888
Argument injection in a MimeTypeGuesser in Symfony An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 …
4.3.8
Vulnerable
GHSA-vqc8-7275-q272
Aliases:
CVE-2026-45070
Symfony has Email Header Injection via Non-Token Characters in Mime Parameter Names ### Description `Symfony\Component\Mime\Header\ParameterizedHeader` (and the related parameter handling …
5.4.52
Not vulnerable
GHSA-qpmx-3rfj-7rhv
Aliases:
CVE-2026-45067
Symfony has Email Header / SMTP Command Injection via CRLF in Symfony\Component\Mime\Address ### Description `Symfony\Component\Mime\Address` is the value-object every Symfony …
5.4.52
Not vulnerable
This package is not known to fix any advisories.