All products

symfony/security

Composer · Package
17 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Symphony Denial of Service Via Overlong UsernamesCVE-2016-4423 · GHSA-WHGV-8CG3-7HCMVersion ranges need review. symfony/security-httpsymfony/security Composer High Fix reported
Symfony Denial of Service Via Long Password HashingCVE-2013-5958 · GHSA-CR49-FX2V-9P57Version ranges need review. symfony/polyfill-php55symfony/polyfill Composer Medium Fix reported
Symfony Allows URI Restrictions Bypass Via Double-Encoded StringCVE-2012-6431 · GHSA-83C3-QX27-2RWR symfony/http-foundationsymfony/routing Composer Medium Fix reported
Symfony Vulnerable to Timing AttackCVE-2015-8125 · GHSA-G97C-JFX6-XVXHVersion ranges need review. symfony/formsymfony/security-http Composer High Fix reported
Symfony Open RedirectCVE-2018-19790 · GHSA-89R2-5G34-2G47Version ranges need review. symfony/security-httpsymfony/security Composer Medium Fix reported
Symfony Authentication BypassCVE-2018-11407 · GHSA-35C5-28PG-2QG4Version ranges need review. symfony/security-coresymfony/security Composer Critical Fix reported
Prevent user enumeration using Guard or the new Authenticator-based SecurityCVE-2021-21424 · GHSA-5PV8-PPVJ-4H68Version ranges need review. lexik/jwt-authentication-bundlesymfony/maker-bundle Composer Medium Fix reported
Symfony Cryptographic VulnerabilityCVE-2016-1902 · GHSA-JJX5-FQ5G-8XPCVersion ranges need review. symfony/security-coresymfony/security Composer High Fix reported
Symfony CSRF Token FixationCVE-2018-11406 · GHSA-G4G7-Q726-V5HGVersion ranges need review. symfony/security-bundlesymfony/security-csrf Composer High Fix reported
Symfony Session Fixation VulnerabilityCVE-2018-11385 · GHSA-G4RG-RW65-8HFGVersion ranges need review. symfony/security-guardsymfony/security-http Composer High Fix reported
Symfony Authentication BypassCVE-2016-2403 · GHSA-WVJ5-R78R-HHFQVersion ranges need review. symfony/security-coresymfony/security Composer Critical Fix reported
Symfony Incorrect Access ControlCVE-2017-11365 · GHSA-Q87V-Q8FW-GMJ5Version ranges need review. symfony/security-coresymfony/security Composer Critical Fix reported
Symfony Open RedirectCVE-2017-16652 · GHSA-R7P7-QR7P-2RRFVersion ranges need review. symfony/security-httpsymfony/security Composer Medium Fix reported
Symfony CSRF VulnerabilityCVE-2017-16653 · GHSA-92X6-H2GR-8GXQVersion ranges need review. symfony/security-csrfsymfony/security Composer Medium Fix reported
Symfony Session Fixation VulnerabilityCVE-2015-8124 · GHSA-J5JH-HPR4-H332Version ranges need review. symfony/security-httpsymfony/security Composer Low Fix reported
Improper authentication in SymfonyCVE-2019-10911 · GHSA-CCHX-MFRC-FWQRVersion ranges need review. symfony/security-httpsymfony/security Composer High Fix reported
Firewall configured with unanimous strategy was not actually unanimous in SymfonyCVE-2020-5275 · GHSA-G4M9-5HPF-HX72Version ranges need review. symfony/security-httpsymfony/security Composer High Fix reported