Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/security-bundle@2.4.0-RC1
purl pkg:composer/symfony/security-bundle@2.4.0-RC1
Next non-vulnerable version 4.4.50
Latest non-vulnerable version 7.1.3
Risk score 2.9
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-3gv2-29qc-v67m
Aliases:
CVE-2022-24895
GMS-2023-210
Symfony vulnerable to Session Fixation of CSRF tokens Description ----------- When authenticating users Symfony by default regenerates the session ID …
4.4.50
Not vulnerable
CVE-2018-11406

Cross-Site Request Forgery (CSRF) By default, a user's session is invalidated when the user is logged out. This behavior can …
2.8.41
Vulnerable
3.4.11
Vulnerable
4.0.11
Vulnerable
This package is not known to fix any advisories.