symfony/routing
Composer · بسته
اطلاعرسانی آسیبپذیری
دنبالکردن| گزارش | محصول | اکوسیستم | شدت | وضعیت اصلاح | آخرین تغییر |
|---|---|---|---|---|---|
| Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization | symfony/routingsymfony/symfony | Composer | متوسط | اصلاح گزارش شده | |
| Symfony has a UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injection | symfony/routingsymfony/symfony | Composer | متوسط | اصلاح گزارش شده | |
| Symfony XXE security vulnerability | symfony/routing | Composer | زیاد | اصلاح گزارش شده | |
| Symfony Allows URI Restrictions Bypass Via Double-Encoded String | symfony/http-foundationsymfony/routing | Composer | متوسط | اصلاح گزارش شده | |
| CVE-2026-118516: Host Placeholders Can Match the Start of the Path in Compiled URL Matchers, Bypassing Path-Based Access Control | symfony/routingsymfony/symfony | Composer | نامشخص | اصلاح اعلام نشده |