symfony/ux-live-component
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| symfony/ux-live-component: Denial of service via unbounded batch action requests | symfony/ux-live-component | Composer | Low | Fix reported | |
| symfony/ux-live-component: CSRF Protection Bypass — Accept Header is CORS-Safelisted | symfony/ux-live-component | Composer | Low | Fix reported | |
| symfony/ux-live-component: LiveComponentHydrator HMAC checksum lacks component and slot binding | symfony/ux-live-component | Composer | Low | Fix reported | |
| symfony/ux-live-component: XSS via attacker-controlled child component tag | symfony/ux-live-component | Composer | Medium | Fix reported | |
| ux-live-component: Format-less date LiveProps parsed with the permissive DateTime constructor | symfony/ux-live-component | Composer | Medium | Fix reported | |
| Symfony UX allows unsanitized HTML attribute injection via ComponentAttributes | symfony/ux-live-componentsymfony/ux-twig-component | Composer | Medium | Fix reported |