Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
symfony/security
Composer
· Package
17 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Symphony Denial of Service Via Overlong Usernames
CVE-2016-4423 · GHSA-WHGV-8CG3-7HCM
Version ranges need review.
symfony/security-http
symfony/security
Composer
High
Fix reported
2024-12-08
Symfony Denial of Service Via Long Password Hashing
CVE-2013-5958 · GHSA-CR49-FX2V-9P57
Version ranges need review.
symfony/polyfill-php55
symfony/polyfill
Composer
Medium
Fix reported
2024-12-08
Symfony Allows URI Restrictions Bypass Via Double-Encoded String
CVE-2012-6431 · GHSA-83C3-QX27-2RWR
symfony/http-foundation
symfony/routing
Composer
Medium
Fix reported
2024-12-03
Symfony Vulnerable to Timing Attack
CVE-2015-8125 · GHSA-G97C-JFX6-XVXH
Version ranges need review.
symfony/form
symfony/security-http
Composer
High
Fix reported
2024-11-30
Symfony Open Redirect
CVE-2018-19790 · GHSA-89R2-5G34-2G47
Version ranges need review.
symfony/security-http
symfony/security
Composer
Medium
Fix reported
2024-04-26
Symfony Authentication Bypass
CVE-2018-11407 · GHSA-35C5-28PG-2QG4
Version ranges need review.
symfony/security-core
symfony/security
Composer
Critical
Fix reported
2024-04-26
Prevent user enumeration using Guard or the new Authenticator-based Security
CVE-2021-21424 · GHSA-5PV8-PPVJ-4H68
Version ranges need review.
lexik/jwt-authentication-bundle
symfony/maker-bundle
Composer
Medium
Fix reported
2024-02-26
Symfony Cryptographic Vulnerability
CVE-2016-1902 · GHSA-JJX5-FQ5G-8XPC
Version ranges need review.
symfony/security-core
symfony/security
Composer
High
Fix reported
2024-02-18
Symfony CSRF Token Fixation
CVE-2018-11406 · GHSA-G4G7-Q726-V5HG
Version ranges need review.
symfony/security-bundle
symfony/security-csrf
Composer
High
Fix reported
2024-02-18
Symfony Session Fixation Vulnerability
CVE-2018-11385 · GHSA-G4RG-RW65-8HFG
Version ranges need review.
symfony/security-guard
symfony/security-http
Composer
High
Fix reported
2024-02-18
Symfony Authentication Bypass
CVE-2016-2403 · GHSA-WVJ5-R78R-HHFQ
Version ranges need review.
symfony/security-core
symfony/security
Composer
Critical
Fix reported
2024-02-16
Symfony Incorrect Access Control
CVE-2017-11365 · GHSA-Q87V-Q8FW-GMJ5
Version ranges need review.
symfony/security-core
symfony/security
Composer
Critical
Fix reported
2024-02-16
Symfony Open Redirect
CVE-2017-16652 · GHSA-R7P7-QR7P-2RRF
Version ranges need review.
symfony/security-http
symfony/security
Composer
Medium
Fix reported
2024-02-16
Symfony CSRF Vulnerability
CVE-2017-16653 · GHSA-92X6-H2GR-8GXQ
Version ranges need review.
symfony/security-csrf
symfony/security
Composer
Medium
Fix reported
2024-02-16
Symfony Session Fixation Vulnerability
CVE-2015-8124 · GHSA-J5JH-HPR4-H332
Version ranges need review.
symfony/security-http
symfony/security
Composer
Low
Fix reported
2024-02-16
Improper authentication in Symfony
CVE-2019-10911 · GHSA-CCHX-MFRC-FWQR
Version ranges need review.
symfony/security-http
symfony/security
Composer
High
Fix reported
2024-02-16
Firewall configured with unanimous strategy was not actually unanimous in Symfony
CVE-2020-5275 · GHSA-G4M9-5HPF-HX72
Version ranges need review.
symfony/security-http
symfony/security
Composer
High
Fix reported
2024-02-05