Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/yaml@2.0.0
purl pkg:composer/symfony/yaml@2.0.0
Tags Ghost
Next non-vulnerable version 5.4.54
Latest non-vulnerable version 8.1.6
Risk score 3.9
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-7w53-hfpw-rg3g
Aliases:
CVE-2013-1397
Symfony Arbitrary PHP code Execution Symfony 2.0.x before 2.0.22, 2.1.x before 2.1.7, and 2.2.x remote attackers to execute arbitrary PHP …
2.0.22
Vulnerable
GHSA-2r5h-6r7v-5m7c
Aliases:
CVE-2013-1348
Symphony Vulnerable to PHP Code Injection via YAML Parsing The `Yaml::parse` function in Symfony 2.0.x before 2.0.22 remote attackers to …
2.0.22
Vulnerable
GHSA-2v3c-qxhr-7vpv
Aliases:
CVE-2026-109413
Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process ### Description `Yaml\Parser::lexInlineStructure()` recursed through …
5.4.54
Not vulnerable
This package is not known to fix any advisories.