Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/security-core@2.8.11
purl pkg:composer/symfony/security-core@2.8.11
Next non-vulnerable version 3.4.48
Latest non-vulnerable version 5.2.8
Risk score 4.4
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-5pv8-ppvj-4h68
Aliases:
CVE-2021-21424
Prevent user enumeration using Guard or the new Authenticator-based Security Description ----------- The ability to enumerate users was possible without …
3.4.48
Not vulnerable
CVE-2018-11407

Improper Authentication An issue was discovered in the Ldap component in Symfony. It allows remote attackers to bypass authentication by …
2.8.37
Vulnerable
3.4.7
Vulnerable
4.0.7
Vulnerable
GHSA-35c5-28pg-2qg4
Aliases:
CVE-2018-11407
Symfony Authentication Bypass An issue was discovered in the LDAP component in Symfony 2.8.x before 2.8.37, 3.3.x before 3.3.17, 3.4.x …
2.8.37
Vulnerable
2.8.37
Vulnerable
This package is not known to fix any advisories.