CRITICAL9.8Packagist
GHSA-35c5-28pg-2qg4· CVE-2018-11407Symfony Authentication Bypass
Modified: 4/25/2024
package
Packagist/symfony/security
pkg:packagist/symfony/security
MEDIUM5.3Packagist
GHSA-5pv8-ppvj-4h68· BIT-symfony-2021-21424, CVE-2021-21424Prevent user enumeration using Guard or the new Authenticator-based Security
Modified: 9/10/2026
MEDIUMPackagist
GHSA-83c3-qx27-2rwr· CVE-2012-6431Symfony Allows URI Restrictions Bypass Via Double-Encoded String
Modified: 12/3/2024
MEDIUM6.1Packagist
GHSA-89r2-5g34-2g47· CVE-2018-19790Symfony Open Redirect
Modified: 4/25/2024
MEDIUM5.9Packagist
GHSA-92x6-h2gr-8gxq· CVE-2017-16653Symfony CSRF Vulnerability
Modified: 2/16/2024
HIGH7.5Packagist
GHSA-cchx-mfrc-fwqr· CVE-2019-10911Improper authentication in Symfony
Modified: 2/16/2024
MEDIUMPackagist
GHSA-cr49-fx2v-9p57· CVE-2013-5958Symfony Denial of Service Via Long Password Hashing
Modified: 12/8/2024
HIGH8.8Packagist
GHSA-g4g7-q726-v5hg· CVE-2018-11406Symfony CSRF Token Fixation
Modified: 2/18/2024
HIGH7.6Packagist
GHSA-g4m9-5hpf-hx72· BIT-symfony-2020-5275, CVE-2020-5275Firewall configured with unanimous strategy was not actually unanimous in Symfony
Modified: 9/10/2026
HIGH8.1Packagist
GHSA-g4rg-rw65-8hfg· CVE-2018-11385Symfony Session Fixation Vulnerability
Modified: 2/18/2024
HIGHPackagist
GHSA-g97c-jfx6-xvxh· CVE-2015-8125Symfony Vulnerable to Timing Attack
Modified: 11/30/2024
LOW3.1Packagist
GHSA-j5jh-hpr4-h332· CVE-2015-8124Symfony Session Fixation Vulnerability
Modified: 2/16/2024
HIGH7.5Packagist
GHSA-jjx5-fq5g-8xpc· CVE-2016-1902Symfony Cryptographic Vulnerability
Modified: 2/18/2024
CRITICAL9.8Packagist
GHSA-q87v-q8fw-gmj5· CVE-2017-11365Symfony Incorrect Access Control
Modified: 2/16/2024
MEDIUM6.1Packagist
GHSA-r7p7-qr7p-2rrf· CVE-2017-16652Symfony Open Redirect
Modified: 2/16/2024
HIGH7.5Packagist
GHSA-whgv-8cg3-7hcm· CVE-2016-4423Symphony Denial of Service Via Overlong Usernames
Modified: 12/8/2024
CRITICAL9.8Packagist
GHSA-wvj5-r78r-hhfq· CVE-2016-2403Symfony Authentication Bypass
Modified: 2/16/2024