Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/security-core@2.8.37
purl pkg:composer/symfony/security-core@2.8.37
Next non-vulnerable version 3.4.48
Latest non-vulnerable version 5.2.8
Risk score 2.4
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-5pv8-ppvj-4h68
Aliases:
CVE-2021-21424
Prevent user enumeration using Guard or the new Authenticator-based Security Description ----------- The ability to enumerate users was possible without …
3.4.48
Not vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
CVE-2018-11407
Improper Authentication An issue was discovered in the Ldap component in Symfony. It allows remote attackers to bypass authentication by …
GHSA-35c5-28pg-2qg4
Symfony Authentication Bypass An issue was discovered in the LDAP component in Symfony 2.8.x before 2.8.37, 3.3.x before 3.3.17, 3.4.x … CVE-2018-11407