Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/security@3.4.15
purl pkg:composer/symfony/security@3.4.15
Next non-vulnerable version 3.4.49
Latest non-vulnerable version 4.4.24
Risk score 3.4
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
GHSA-5pv8-ppvj-4h68
Aliases:
CVE-2021-21424
Prevent user enumeration using Guard or the new Authenticator-based Security Description ----------- The ability to enumerate users was possible without …
3.4.49
Not vulnerable
CVE-2021-21424
Aliases:
GHSA-5pv8-ppvj-4h68
Information Exposure Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The …
4.4.23
Vulnerable
3.4.48
Vulnerable
CVE-2019-10911

Improper Authentication In Symfony, a vulnerability would allow an attacker to authenticate as a privileged user on sites with user …
4.2.7
Vulnerable
2.8.50
Vulnerable
3.4.26
Vulnerable
2.7.51
Vulnerable
GHSA-89r2-5g34-2g47
Aliases:
CVE-2018-19790
Symfony Open Redirect An open redirect was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x …
3.4.19
Vulnerable
3.4.19
Vulnerable
GHSA-cchx-mfrc-fwqr
Aliases:
CVE-2019-10911
Improper authentication in Symfony In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before …
3.4.26
Vulnerable
3.4.26
Vulnerable
This package is not known to fix any advisories.