MEDIUM6.5Packagist
GHSA-4cpv-669c-r79x· CVE-2023-41336Prevent injection of invalid entity ids for "autocomplete" fields
Modified: 9/10/2026
package
Packagist/symfony/ux-autocomplete
pkg:packagist/symfony/ux-autocomplete
MEDIUMPackagist
GHSA-946h-jp5c-8fvh· CVE-2026-49211symfony/ux-autocomplete: Information exposure via unescaped LIKE wildcards in EntitySearchUtil
Modified: 9/10/2026
MEDIUMPackagist
GHSA-mwqm-4fw3-cjvr· CVE-2026-49216symfony/ux-autocomplete: XSS via unescaped AJAX response data
Modified: 9/10/2026