All products

symfony/ux-autocomplete

Composer · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
symfony/ux-autocomplete: XSS via unescaped AJAX response dataCVE-2026-49216 · GHSA-MWQM-4FW3-CJVRVersion ranges need review. symfony/ux-autocomplete Composer Medium Fix reported
symfony/ux-autocomplete: Information exposure via unescaped LIKE wildcards in EntitySearchUtilCVE-2026-49211 · GHSA-946H-JP5C-8FVHVersion ranges need review. symfony/ux-autocomplete Composer Medium Fix reported
Prevent injection of invalid entity ids for "autocomplete" fieldsCVE-2023-41336 · GHSA-4CPV-669C-R79X symfony/ux-autocomplete Composer Medium Fix reported