Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/routing@2.0.14
purl pkg:composer/symfony/routing@2.0.14
Next non-vulnerable version 5.4.53
Latest non-vulnerable version 8.0.13
Risk score 3.4
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
GHSA-83c3-qx27-2rwr
Aliases:
CVE-2012-6431
Symfony Allows URI Restrictions Bypass Via Double-Encoded String On the Symfony 2.0.x version, there's a security issue that allows access …
2.0.19
Vulnerable
GHSA-rjpm-qmq7-q85w

Symfony XXE security vulnerability Symfony 2.0.11 carried a [similar] XXE security fix, however, on review of ZF2 I also noted …
2.0.17
Vulnerable
GHSA-h5x3-xfc9-m39h
Aliases:
CVE-2026-48784
Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization …
5.4.53
Not vulnerable
GHSA-72xp-p242-47p9
Aliases:
CVE-2026-45065
Symfony has a UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injection ### Description Symfony routes can …
5.4.52
Vulnerable
GMS-2012-10

Improper Restriction of XML External Entity Reference Security issues related to the way XML is handled.
2.0.17
Vulnerable
This package is not known to fix any advisories.