MEDIUM6.3Packagist
GHSA-3gv2-29qc-v67m· BIT-symfony-2022-24895, CVE-2022-24895Symfony vulnerable to Session Fixation of CSRF tokens
Modified: 2/13/2025
package
Packagist/symfony/security-bundle
pkg:packagist/symfony/security-bundle
MEDIUM6.1Packagist
GHSA-7hwc-2cq4-6x2w· CVE-2018-11408Symfony Open Redirect
Modified: 2/17/2024
HIGH8.8Packagist
GHSA-g4g7-q726-v5hg· CVE-2018-11406Symfony CSRF Token Fixation
Modified: 2/18/2024
LOW3.1Packagist
GHSA-jxgr-3v7q-3w9v· CVE-2024-50341Symfony's `Security::login` does not take into account custom `user_checker`
Modified: 11/7/2024
MEDIUM6.5Packagist
GHSA-qw36-p97w-vcqr· BIT-symfony-2021-41268, CVE-2021-41268Cookie persistence after password changes in symfony/security-bundle
Modified: 7/8/2026