Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-6439-2f28-8p8q
  • Packagist/symfony/http-kernel
  • Packagist/symfony/security-http
  • Packagist/symfony/symfony
 Symfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid] 27 May
  • Fix available
  • Severity - 8.6 (High)
GHSA-wvjv-p5rr-mmqm
  • Packagist/symfony/http-kernel
  • Packagist/symfony/symfony
 Symfony allows direct access of ESI URLs behind a trusted proxy 30 May 2024
  • Fix available
  • Severity - 7.5 (High)
GHSA-h7vf-5wrv-9fhv
  • Packagist/symfony/http-kernel
  • Packagist/symfony/symfony
 Symfony storing cookie headers in HttpCache 01 Feb 2023
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-5c58-w9xc-qcj9
  • Packagist/symfony/http-kernel
  • Packagist/symfony/symfony
 Symfony Vulnerable to PHP Eval Injection 17 May 2022
  • Fix available
GHSA-qmqw-mpqp-mr54
  • Packagist/symfony/http-kernel
  • Packagist/symfony/symfony
 Symfony Incorrect Access Control 17 May 2022
  • Fix available
GHSA-q8hg-pf8v-cxrv
  • Packagist/symfony/http-kernel
  • Packagist/symfony/symfony
 Symfony Http-Kernel has non-constant time comparison in UriSigner 26 Mar 2022
  • Fix available
  • Severity - 8.1 (High)
GHSA-q3j3-w37x-hq2q
  • Packagist/symfony/http-kernel
  • Packagist/symfony/symfony
 Webcache Poisoning in symfony/http-kernel 24 Nov 2021
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-754h-5r27-7x3r
  • Packagist/symfony/http-kernel
  • Packagist/symfony/symfony
 RCE in Symfony 02 Sep 2020
  • Fix available
  • Severity - 8.0 (High)