Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/security-bundle@3.2.2
purl pkg:composer/symfony/security-bundle@3.2.2
Next non-vulnerable version 4.4.50
Latest non-vulnerable version 7.1.3
Risk score 4.0
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-3gv2-29qc-v67m
Aliases:
CVE-2022-24895
GMS-2023-210
Symfony vulnerable to Session Fixation of CSRF tokens Description ----------- When authenticating users Symfony by default regenerates the session ID …
4.4.50
Not vulnerable
CVE-2018-11408

URL Redirection to Untrusted Site (Open Redirect) The security handlers in the Security component in Symfony have an Open redirect …
2.7.48
Vulnerable
2.8.41
Vulnerable
3.4.11
Vulnerable
4.0.11
Vulnerable
CVE-2018-11406

Cross-Site Request Forgery (CSRF) By default, a user's session is invalidated when the user is logged out. This behavior can …
2.8.41
Vulnerable
3.4.11
Vulnerable
4.0.11
Vulnerable
GHSA-g4g7-q726-v5hg
Aliases:
CVE-2018-11406
Symfony CSRF Token Fixation An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, …
3.3.17
Vulnerable
3.3.17
Vulnerable
This package is not known to fix any advisories.