HIGHPackagist
GHSA-qpmx-3rfj-7rhv· CVE-2026-45067Symfony has Email Header / SMTP Command Injection via CRLF in Symfony\Component\Mime\Address
Modified: 9/10/2026
package
Packagist/symfony/mime
pkg:packagist/symfony/mime
MEDIUMPackagist
GHSA-vqc8-7275-q272· CVE-2026-45070Symfony has Email Header Injection via Non-Token Characters in Mime Parameter Names
Modified: 9/10/2026
HIGH7.5Packagist
GHSA-xhh6-956q-4q69· CVE-2019-18888Argument injection in a MimeTypeGuesser in Symfony
Modified: 2/20/2024