Search for packages
| purl | pkg:composer/symfony/security-http@6.3.8 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-cg23-qf8f-62rr
Aliases: CVE-2024-51996 |
Symfony has an Authentication Bypass via RememberMe ### Description When consuming a persisted remember-me cookie, Symfony does not check if … |
Vulnerable |
|
GHSA-7q22-x757-cmgc
Aliases: CVE-2024-36611 |
Withdrawn Advisory: Symfony http-security has authentication bypass ## Withdrawn Advisory This advisory has been withdrawn because the report is not … |
Vulnerable |
|
GHSA-6h46-9jf5-q59x
Aliases: CVE-2026-48489 |
Symfony: Security Firewall Bypass via failure_forward Subrequest: Unauthenticated Access to access_control-Protected GET Routes ### Description When a firewall is configured … |
Vulnerable |
|
GHSA-ph86-p8f6-f9r2
Aliases: CVE-2026-45063 |
Symfony Vulnerable to Identity Spoofing via Unanchored DN Regex in X509Authenticator ### Description `X509Authenticator` implements client-certificate (mTLS) authentication: the web … |
Vulnerable |
|
GHSA-29fc-p6c4-24cg
Aliases: CVE-2026-45069 |
Symfony's OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claims ### Description `OidcTokenHandler` is Symfony's built-in access-token handler for OpenID Connect: it validates … |
Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-m2wj-r6g3-fxfx
|
Symfony possible session fixation vulnerability ### Description SessionStrategyListener does not always migrate the session after a successful login. It only … |
CVE-2023-46733
|
|
CVE-2023-46734
|
Cross-site scripting Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting … |
GHSA-q847-2q57-wmr3
|
|
CVE-2023-46735
|
Cross-site scripting Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting … |
GHSA-72x2-5c85-6wmr
|