Packagist/symfony/yaml

Symphony Vulnerable to PHP Code Injection via YAML Parsing

Modified: 12/8/2024

Symfony's YAML Parser Vulnerable to Exponential Memory Allocation via Recursive Collection-Alias Expansion ("Billion Laughs")

Modified: 9/10/2026

Symfony Arbitrary PHP code Execution

Modified: 4/14/2025

Symfony's YAML Parser has a ReDoS via Catastrophic Backtracking in Parser::cleanup() Regex

Modified: 9/10/2026

Symfony hardened the parser when handling untrusted input

Modified: 9/10/2026