Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/routing@2.2.11
purl pkg:composer/symfony/routing@2.2.11
Next non-vulnerable version 5.4.53
Latest non-vulnerable version 8.0.13
Risk score 3.1
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-h5x3-xfc9-m39h
Aliases:
CVE-2026-48784
Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization …
5.4.53
Not vulnerable
GHSA-72xp-p242-47p9
Aliases:
CVE-2026-45065
Symfony has a UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injection ### Description Symfony routes can …
5.4.52
Vulnerable
This package is not known to fix any advisories.