VulnerableCode Package Details - pkg:composer/symfony/security@4.3.0-BETA2

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:composer/symfony/security@4.3.0-BETA2

Essentials

purl	pkg:composer/symfony/security@4.3.0-BETA2

Next non-vulnerable version	4.4.24
Latest non-vulnerable version	4.4.24
Risk score	2.4

Vulnerabilities affecting this package (2)

Advisory	Summary	Fixed in package version
GHSA-5pv8-ppvj-4h68 Aliases: CVE-2021-21424	Prevent user enumeration using Guard or the new Authenticator-based Security Description ----------- The ability to enumerate users was possible without …	4.4.24 Not vulnerable
CVE-2021-21424 Aliases: GHSA-5pv8-ppvj-4h68	Information Exposure Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The …	4.4.23 Vulnerable 3.4.48 Vulnerable

Advisory

Summary

Fixed in package version

GHSA-5pv8-ppvj-4h68
Aliases:
CVE-2021-21424

Prevent user enumeration using Guard or the new Authenticator-based Security Description ----------- The ability to enumerate users was possible without …

4.4.24
Not vulnerable

CVE-2021-21424
Aliases:
GHSA-5pv8-ppvj-4h68

Information Exposure Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The …

4.4.23
Vulnerable

3.4.48
Vulnerable

This package is not known to fix any advisories.