Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/security@4.1.9
purl pkg:composer/symfony/security@4.1.9
Next non-vulnerable version 4.4.24
Latest non-vulnerable version 4.4.24
Risk score 3.4
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-5pv8-ppvj-4h68
Aliases:
CVE-2021-21424
Prevent user enumeration using Guard or the new Authenticator-based Security Description ----------- The ability to enumerate users was possible without …
4.4.24
Not vulnerable
CVE-2021-21424
Aliases:
GHSA-5pv8-ppvj-4h68
Information Exposure Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The …
4.4.23
Vulnerable
3.4.48
Vulnerable
CVE-2019-10911

Improper Authentication In Symfony, a vulnerability would allow an attacker to authenticate as a privileged user on sites with user …
4.2.7
Vulnerable
2.8.50
Vulnerable
3.4.26
Vulnerable
2.7.51
Vulnerable
GHSA-cchx-mfrc-fwqr
Aliases:
CVE-2019-10911
Improper authentication in Symfony In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before …
4.1.12
Vulnerable
4.1.12
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-89r2-5g34-2g47
Symfony Open Redirect An open redirect was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x … CVE-2018-19790