Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/security-bundle@4.0.11
purl pkg:composer/symfony/security-bundle@4.0.11
Next non-vulnerable version 4.4.50
Latest non-vulnerable version 7.1.3
Risk score 2.9
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-3gv2-29qc-v67m
Aliases:
CVE-2022-24895
GMS-2023-210
Symfony vulnerable to Session Fixation of CSRF tokens Description ----------- When authenticating users Symfony by default regenerates the session ID …
4.4.50
Not vulnerable
Vulnerabilities fixed by this package (4)

Advisory Summary Aliases
CVE-2018-11408
URL Redirection to Untrusted Site (Open Redirect) The security handlers in the Security component in Symfony have an Open redirect …
CVE-2018-11406
Cross-Site Request Forgery (CSRF) By default, a user's session is invalidated when the user is logged out. This behavior can …
GHSA-g4g7-q726-v5hg
Symfony CSRF Token Fixation An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, … CVE-2018-11406
GHSA-7hwc-2cq4-6x2w
Symfony Open Redirect The security handlers in the Security component in Symfony in 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x … CVE-2018-11408