Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/web-profiler-bundle@2.2.6
purl pkg:composer/symfony/web-profiler-bundle@2.2.6
Next non-vulnerable version 2.4.9
Latest non-vulnerable version 8.0.12
Risk score 3.6
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-v35g-4rrw-h4fw
Aliases:
CVE-2014-6072
Symfony Cross-Site Request Forgery vulnerability in the Web Profiler All 2.0.X, 2.1.X, 2.2.X, 2.3.X, 2.4.X, and 2.5.X versions of the …
2.3.19
Vulnerable
CVE-2014-6072

Cross-Site Request Forgery (CSRF) CSRF vulnerability in the Web Profiler
2.4.9
Not vulnerable
2.5.4
Not vulnerable
This package is not known to fix any advisories.