Search for packages
| purl | pkg:composer/symfony/security-http@2.4.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-j5jh-hpr4-h332
Aliases: CVE-2015-8124 |
Symfony Session Fixation Vulnerability A session fixation vulnerability within the "Remember Me" login feature allows an attacker to impersonate the … |
Vulnerable |
|
GHSA-g97c-jfx6-xvxh
Aliases: CVE-2015-8125 |
Symfony Vulnerable to Timing Attack Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 might allow remote attackers … |
Vulnerable |
|
GHSA-7q22-x757-cmgc
Aliases: CVE-2024-36611 |
Withdrawn Advisory: Symfony http-security has authentication bypass ## Withdrawn Advisory This advisory has been withdrawn because the report is not … |
Vulnerable |
|
GHSA-6h46-9jf5-q59x
Aliases: CVE-2026-48489 |
Symfony: Security Firewall Bypass via failure_forward Subrequest: Unauthenticated Access to access_control-Protected GET Routes ### Description When a firewall is configured … |
Vulnerable |
|
GHSA-ph86-p8f6-f9r2
Aliases: CVE-2026-45063 |
Symfony Vulnerable to Identity Spoofing via Unanchored DN Regex in X509Authenticator ### Description `X509Authenticator` implements client-certificate (mTLS) authentication: the web … |
Vulnerable |
|
CVE-2016-4423
|
Large username storage in session When an authentication form is submitted by the user and if the user does not … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-whgv-8cg3-7hcm
Aliases: CVE-2016-4423 |
Symphony Denial of Service Via Overlong Usernames The attemptAuthentication function in `Component/Security/Http/Firewall/UsernamePasswordFormAuthenticationListener.php` in Symfony before 2.3.41, 2.7.x before 2.7.13, 2.8.x … |
Vulnerable Vulnerable |
|
CVE-2023-46734
Aliases: GHSA-q847-2q57-wmr3 |
Cross-site scripting Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting … |
Vulnerable Vulnerable Vulnerable Vulnerable |