Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/security-bundle@3.3.18
purl pkg:composer/symfony/security-bundle@3.3.18
Next non-vulnerable version 4.4.50
Latest non-vulnerable version 7.1.3
Risk score 2.9
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-3gv2-29qc-v67m
Aliases:
CVE-2022-24895
GMS-2023-210
Symfony vulnerable to Session Fixation of CSRF tokens Description ----------- When authenticating users Symfony by default regenerates the session ID …
4.4.50
Not vulnerable
CVE-2018-11408

URL Redirection to Untrusted Site (Open Redirect) The security handlers in the Security component in Symfony have an Open redirect …
2.7.48
Vulnerable
2.8.41
Vulnerable
3.4.11
Vulnerable
4.0.11
Vulnerable
CVE-2018-11406

Cross-Site Request Forgery (CSRF) By default, a user's session is invalidated when the user is logged out. This behavior can …
2.8.41
Vulnerable
3.4.11
Vulnerable
4.0.11
Vulnerable
This package is not known to fix any advisories.