Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/security-core@3.3.17
purl pkg:composer/symfony/security-core@3.3.17
Next non-vulnerable version 3.4.48
Latest non-vulnerable version 5.2.8
Risk score 2.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-5pv8-ppvj-4h68
Aliases:
CVE-2021-21424
Prevent user enumeration using Guard or the new Authenticator-based Security Description ----------- The ability to enumerate users was possible without …
3.4.48
Not vulnerable
CVE-2018-11407

Improper Authentication An issue was discovered in the Ldap component in Symfony. It allows remote attackers to bypass authentication by …
2.8.37
Vulnerable
3.4.7
Vulnerable
4.0.7
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-35c5-28pg-2qg4
Symfony Authentication Bypass An issue was discovered in the LDAP component in Symfony 2.8.x before 2.8.37, 3.3.x before 3.3.17, 3.4.x … CVE-2018-11407