DEBIAN-CVE-2026-45305
- Source
- https://security-tracker.debian.org/tracker/CVE-2026-45305
- Import Source
- https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-45305.json
- JSON Data
- https://api.osv.dev/v1/vulns/DEBIAN-CVE-2026-45305
- Upstream
- Published
- 2026-07-14T19:17:07Z
- Modified
- 2026-09-14T17:03:13Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, Symfony\Component\Yaml\Parser::cleanup() used regular expressions with overlapping quantifiers for YAML directive, comment, and document marker cleanup, allowing crafted input to make parsing hang for an arbitrarily long time. This issue is fixed in versions 5.4.52, 6.4.40, 7.4.12, and 8.0.12.
- References
Affected packages
Debian:12 / symfony
Package
- Name
- symfony
- Purl
- pkg:deb/debian/symfony?arch=source&distro=bookworm
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed5.4.53+dfsg-0+deb12u1
Affected versions
5.*
5.4.23+dfsg-1
5.4.23+dfsg-1+deb12u1
5.4.23+dfsg-1+deb12u2
5.4.23+dfsg-1+deb12u3
5.4.23+dfsg-1+deb12u4
5.4.23+dfsg-1+deb12u5
5.4.24+dfsg-1
5.4.25+dfsg-1
5.4.27+dfsg-1
5.4.28+dfsg-1
5.4.29+dfsg-1
5.4.30+dfsg-1
5.4.31+dfsg-1
5.4.31+dfsg-2
5.4.32+dfsg-1
5.4.33+dfsg-1
5.4.34+dfsg-1
5.4.34+dfsg-2
5.4.35+dfsg-1
5.4.35+dfsg-2
5.4.35+dfsg-3
5.4.52+dfsg-0+deb12u1
Debian:13 / symfony
Package
- Name
- symfony
- Purl
- pkg:deb/debian/symfony?arch=source&distro=trixie
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed6.4.41+dfsg-0+deb13u1
Debian:14 / symfony
Package
- Name
- symfony
- Purl
- pkg:deb/debian/symfony?arch=source&distro=forky
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed7.4.12+dfsg-1
Affected versions
6.*
6.4.21+dfsg-2
6.4.24+dfsg-1
6.4.25+dfsg-1
7.*
7.0.4+dfsg-1
7.0.5+dfsg-1
7.0.6+dfsg-1
7.0.7+dfsg-1
7.1.0~beta1+dfsg-1
7.1.0~rc1+dfsg-1
7.1.2+dfsg-1
7.1.3+dfsg-1
7.1.4+dfsg-1
7.1.5+dfsg-1
7.2.0~beta1+dfsg-1
7.2.0~beta2+dfsg-1
7.2.0~rc1+dfsg-1
7.2.1+dfsg-1
7.2.2+dfsg-1
7.2.3+dfsg-1
7.2.4+dfsg-1
7.2.5+dfsg-1
7.2.6-1
7.3.0~beta1+dfsg-1
7.3.0~beta2+dfsg-1
7.3.0~rc1+dfsg-1
7.3.0+dfsg-1
7.3.1+dfsg-1
7.3.2+dfsg-1
7.3.3+dfsg-1
7.3.4+dfsg-1
7.3.5-1
7.4.0~beta1-1
7.4.0~beta1-2
7.4.0~beta2+dfsg-1
7.4.0~beta2+dfsg-2
7.4.0~beta2+dfsg-3
7.4.0~rc1+dfsg-1
7.4.0~rc2+dfsg-1
7.4.0~rc3+dfsg-1
7.4.0+dfsg-1
7.4.0+dfsg-2
7.4.2+dfsg-1
7.4.2+dfsg-2
7.4.3+dfsg-1
7.4.4+dfsg-1
7.4.5+dfsg-1
7.4.6+dfsg-1
7.4.6+dfsg-2
7.4.7+dfsg-1
7.4.8+dfsg-1
7.4.9+dfsg-1
7.4.10+dfsg-1