Search for packages
| purl | pkg:composer/symfony/yaml@7.3.0-BETA1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-c2p3-7m5p-cv8x
Aliases: CVE-2026-45133 |
Symfony hardened the parser when handling untrusted input ### Description `Symfony\Component\Yaml\Parser` is the entry point for parsing YAML strings into … |
Vulnerable |
|
GHSA-4qpc-3hr4-r2p4
Aliases: CVE-2026-45304 |
Symfony's YAML Parser Vulnerable to Exponential Memory Allocation via Recursive Collection-Alias Expansion ("Billion Laughs") ### Description `Symfony\Component\Yaml\Parser` resolves YAML aliases … |
Vulnerable |
|
GHSA-9frc-8383-795m
Aliases: CVE-2026-45305 |
Symfony's YAML Parser has a ReDoS via Catastrophic Backtracking in Parser::cleanup() Regex ### Description `Symfony\Component\Yaml\Parser::cleanup()` strips the optional `%YAML` directive … |
Vulnerable |
|
GHSA-2v3c-qxhr-7vpv
Aliases: CVE-2026-109413 |
Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process ### Description `Yaml\Parser::lexInlineStructure()` recursed through … |
Not vulnerable |