symfony/serializer
Composer · بسته
اطلاعرسانی آسیبپذیری
دنبالکردن| گزارش | محصول | اکوسیستم | شدت | وضعیت اصلاح | آخرین تغییر |
|---|---|---|---|---|---|
| Symfony XML decoding attack vector through external entities | symfony/serializer | Composer | بحرانی | اصلاح گزارش شده | |
| CSV Injection in symfony/serializer | symfony/serializersymfony/symfony | Composer | متوسط | اصلاح گزارش شده | |
| ObjectNormalizer Dotted-Key Property-Path Traversal Bypasses #[Ignore] on Nested Objects | symfony/serializer | Composer | نامشخص | اصلاح اعلام نشده | |
| DataUriNormalizer Opens Data URIs With a Non-Lowercase Scheme as Local Files, Letting a Client Read Any Server File | symfony/serializer | Composer | نامشخص | اصلاح اعلام نشده | |
| CVE-2026-118515: The Serializer Builds UploadedFile Objects From Request Data, Letting a Client Point an Upload at Any Server File | symfony/serializersymfony/symfony | Composer | نامشخص | اصلاح اعلام نشده |