MEDIUMPackagist
GHSA-5c58-w9xc-qcj9· CVE-2015-2308Symfony Vulnerable to PHP Eval Injection
Modified: 12/8/2024
package
Packagist/symfony/http-kernel
pkg:packagist/symfony/http-kernel
HIGHPackagist
GHSA-6439-2f28-8p8q· CVE-2026-45075Symfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]
Modified: 9/10/2026
HIGH8.0Packagist
GHSA-754h-5r27-7x3r· BIT-symfony-2020-15094, CVE-2020-15094RCE in Symfony
Modified: 7/8/2026
MEDIUM5.9Packagist
GHSA-h7vf-5wrv-9fhv· BIT-symfony-2022-24894, CVE-2022-24894Symfony storing cookie headers in HttpCache
Modified: 2/13/2025
MEDIUM6.5Packagist
GHSA-q3j3-w37x-hq2q· BIT-symfony-2021-41267, CVE-2021-41267Webcache Poisoning in symfony/http-kernel
Modified: 7/8/2026
HIGH8.1Packagist
GHSA-q8hg-pf8v-cxrv· CVE-2019-18887Symfony Http-Kernel has non-constant time comparison in UriSigner
Modified: 2/20/2024
MEDIUMPackagist
GHSA-qmqw-mpqp-mr54· CVE-2015-4050Symfony Incorrect Access Control
Modified: 12/5/2024
HIGH7.5Packagist
GHSA-wvjv-p5rr-mmqm· CVE-2014-5245Symfony allows direct access of ESI URLs behind a trusted proxy
Modified: 5/30/2024