Search for packages
| purl | pkg:composer/symfony/yaml@2.0.18 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-7w53-hfpw-rg3g
Aliases: CVE-2013-1397 |
Symfony Arbitrary PHP code Execution Symfony 2.0.x before 2.0.22, 2.1.x before 2.1.7, and 2.2.x remote attackers to execute arbitrary PHP … |
Vulnerable |
|
GHSA-2r5h-6r7v-5m7c
Aliases: CVE-2013-1348 |
Symphony Vulnerable to PHP Code Injection via YAML Parsing The `Yaml::parse` function in Symfony 2.0.x before 2.0.22 remote attackers to … |
Vulnerable |
|
GHSA-c2p3-7m5p-cv8x
Aliases: CVE-2026-45133 |
Symfony hardened the parser when handling untrusted input ### Description `Symfony\Component\Yaml\Parser` is the entry point for parsing YAML strings into … |
Vulnerable |
|
GHSA-4qpc-3hr4-r2p4
Aliases: CVE-2026-45304 |
Symfony's YAML Parser Vulnerable to Exponential Memory Allocation via Recursive Collection-Alias Expansion ("Billion Laughs") ### Description `Symfony\Component\Yaml\Parser` resolves YAML aliases … |
Vulnerable |
|
GHSA-9frc-8383-795m
Aliases: CVE-2026-45305 |
Symfony's YAML Parser has a ReDoS via Catastrophic Backtracking in Parser::cleanup() Regex ### Description `Symfony\Component\Yaml\Parser::cleanup()` strips the optional `%YAML` directive … |
Vulnerable |
|
GHSA-2v3c-qxhr-7vpv
Aliases: CVE-2026-109413 |
Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process ### Description `Yaml\Parser::lexInlineStructure()` recursed through … |
Not vulnerable |