Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/security@4.4.7
purl pkg:composer/symfony/security@4.4.7
Next non-vulnerable version 4.4.24
Latest non-vulnerable version 4.4.24
Risk score 2.4
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-5pv8-ppvj-4h68
Aliases:
CVE-2021-21424
Prevent user enumeration using Guard or the new Authenticator-based Security Description ----------- The ability to enumerate users was possible without …
4.4.24
Not vulnerable
CVE-2020-15094
Aliases:
GHSA-754h-5r27-7x3r
Improper Cross-boundary Removal of Sensitive Data In Symfony, the CachingHttpClient class from the HttpClient Symfony component relies on the HttpCache …
4.4.13
Vulnerable
CVE-2021-21424
Aliases:
GHSA-5pv8-ppvj-4h68
Information Exposure Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The …
4.4.23
Vulnerable
3.4.48
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-g4m9-5hpf-hx72
Firewall configured with unanimous strategy was not actually unanimous in Symfony Description ----------- On Symfony before 4.4.0, when a `Firewall` … CVE-2020-5275