Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/security@2.0.21
purl pkg:composer/symfony/security@2.0.21
Next non-vulnerable version 3.4.49
Latest non-vulnerable version 4.4.24
Risk score
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-cr49-fx2v-9p57
Aliases:
CVE-2013-5958
Symfony Denial of Service Via Long Password Hashing The Security component in Symfony 2.0.x before 2.0.25, 2.1.x before 2.1.13, 2.2.x …
2.0.25
Vulnerable
CVE-2018-11406

Cross-Site Request Forgery (CSRF) By default, a user's session is invalidated when the user is logged out. This behavior can …
2.8.41
Vulnerable
3.4.11
Vulnerable
4.0.11
Vulnerable
CVE-2018-11385

Session Fixation A session fixation vulnerability within the `Guard` login feature may allow an attacker to impersonate a victim towards …
2.8.41
Vulnerable
3.4.11
Vulnerable
4.0.11
Vulnerable
This package is not known to fix any advisories.