Security
فارسی
All products

symfony/http-kernel

Composer · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Symfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]CVE-2026-45075 · GHSA-6439-2F28-8P8QVersion ranges need review. symfony/http-kernelsymfony/security-http Composer High Fix reported
Symfony storing cookie headers in HttpCacheCVE-2022-24894 · GHSA-H7VF-5WRV-9FHVVersion ranges need review. symfony/http-kernelsymfony/symfony Composer Medium Fix reported
Symfony Vulnerable to PHP Eval InjectionCVE-2015-2308 · GHSA-5C58-W9XC-QCJ9Version ranges need review. symfony/http-kernelsymfony/symfony Composer Medium Fix reported
Symfony Incorrect Access ControlCVE-2015-4050 · GHSA-QMQW-MPQP-MR54Version ranges need review. symfony/http-kernelsymfony/symfony Composer Medium Fix reported
Symfony allows direct access of ESI URLs behind a trusted proxyCVE-2014-5245 · GHSA-WVJV-P5RR-MMQMVersion ranges need review. symfony/http-kernelsymfony/symfony Composer High Fix reported
Symfony Http-Kernel has non-constant time comparison in UriSignerCVE-2019-18887 · GHSA-Q8HG-PF8V-CXRVVersion ranges need review. symfony/http-kernelsymfony/symfony Composer High Fix reported
RCE in SymfonyCVE-2020-15094 · GHSA-754H-5R27-7X3RVersion ranges need review. symfony/http-kernelsymfony/symfony Composer High Fix reported
Webcache Poisoning in symfony/http-kernelCVE-2021-41267 · GHSA-Q3J3-W37X-HQ2Q symfony/http-kernelsymfony/symfony Composer Medium Fix reported
Inline Fragments Let Untrusted Forwarded Headers Set the Host, Scheme and Port of the URLs Generated for the Main RequestPKSA-3GXV-7XHQ-MGMZ symfony/http-kernel Composer Unknown No fix reported