Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/routing@6.3.3
purl pkg:composer/symfony/routing@6.3.3
Next non-vulnerable version 6.4.41
Latest non-vulnerable version 8.0.13
Risk score 3.1
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-h5x3-xfc9-m39h
Aliases:
CVE-2026-48784
Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization …
6.4.41
Not vulnerable
GHSA-72xp-p242-47p9
Aliases:
CVE-2026-45065
Symfony has a UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injection ### Description Symfony routes can …
6.4.40
Vulnerable
This package is not known to fix any advisories.