Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

Browse Security Advisories

Security Advisories for symfony/security for https://github.com/symfony/symfony in packagist Clear Filters

Critical
about 3 years ago

Symfony Incorrect Access Control GSA_kwCzR0hTQS1xODd2LXE4ZnctZ21qNc4AAgyh

packagist symfony/symfony, symfony/security, symfony/security-core
Moderate
about 3 years ago

Symfony Allows URI Restrictions Bypass Via Double-Encoded String GSA_kwCzR0hTQS04M2MzLXF4MjctMnJ3cs4AAfXs

packagist symfony/symfony, symfony/security, symfony/routing, symfony/http-foundation
Moderate
about 3 years ago

Symfony Denial of Service Via Long Password Hashing GSA_kwCzR0hTQS1jcjQ5LWZ4MnYtOXA1N84AAd7g

packagist symfony/security, symfony/polyfill, symfony/symfony
High
about 3 years ago

Symfony Cryptographic Vulnerability GSA_kwCzR0hTQS1qang1LWZxNWctOHhwY84AAdU8

packagist symfony/symfony, symfony/security, symfony/security-core
High
about 3 years ago

Symphony Denial of Service Via Overlong Usernames GSA_kwCzR0hTQS13aGd2LThjZzMtN2hjbc4AAdU9

packagist symfony/symfony, symfony/security, symfony/security-http
High
about 3 years ago

Symfony Vulnerable to Timing Attack GSA_kwCzR0hTQS1nOTdjLWpmeDYteHZ4aM4AAcl9

packagist symfony/symfony, symfony/security, symfony/security-http, symfony/form
Critical
about 3 years ago

Symfony Authentication Bypass GSA_kwCzR0hTQS0zNWM1LTI4cGctMnFnNM4AAWke

packagist symfony/symfony, symfony/security, symfony/security-core
Low
about 3 years ago

Symfony Session Fixation Vulnerability GSA_kwCzR0hTQS1qNWpoLWhwcjQtaDMzMs4AAV_7

packagist symfony/security, symfony/security-http, symfony/symfony
High
about 3 years ago

Symfony Session Fixation Vulnerability GSA_kwCzR0hTQS1nNHJnLXJ3NjUtOGhmZ84AAT6-

packagist symfony/security, symfony/security-http, symfony/symfony
High
about 3 years ago

Symfony CSRF Token Fixation GSA_kwCzR0hTQS1nNGc3LXE3MjYtdjVoZ84AATux

packagist symfony/security, symfony/security-http, symfony/security-bundle, symfony/symfony
Moderate
about 3 years ago

Symfony Open Redirect GSA_kwCzR0hTQS04OXIyLTVnMzQtMmc0N84AATfR

packagist symfony/symfony, symfony/security, symfony/security-http
Moderate
over 3 years ago

Symfony CSRF Vulnerability GSA_kwCzR0hTQS05Mng2LWgyZ3ItOGd4cc4AASJF

packagist symfony/symfony, symfony/security, symfony/security-csrf
Moderate
about 4 years ago

Prevent user enumeration using Guard or the new Authenticator-based Security MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVwdjgtcHB2ai00aDY4

packagist symfony/symfony, symfony/security, symfony/security-http, symfony/maker-bundle, lexik/jwt-authentication-bundle, symfony/security-core, symfony/security-guard
High
over 5 years ago

Firewall configured with unanimous strategy was not actually unanimous in Symfony MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWc0bTktNWhwZi1oeDcy

packagist symfony/symfony, symfony/security-http, symfony/security
High
over 5 years ago

Improper authentication in Symfony MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNjaHgtbWZyYy1md3Fy

packagist symfony/symfony, symfony/security, symfony/security-http

Filter by Severity

Moderate 10,148 High 8,078 Critical 3,323 Low 1,456

Filter by Ecosystem

maven 6,734 packagist 5,369 pypi 4,861 npm 4,210 go 2,847 nuget 1,702 cargo 1,072 rubygems 927 hex 37 swift 35 actions 32 pub 10

Filter by Package

moodle/moodle 418 magento/community-edition 300 typo3/cms 190 pimcore/pimcore 120 dolibarr/dolibarr 116 typo3/cms-core 111 phpmyadmin/phpmyadmin 107 microweber/microweber 103 drupal/core 103 magento/project-community-edition 100 silverstripe/framework 92 drupal/drupal 83 librenms/librenms 82 thorsten/phpmyfaq 73 symfony/symfony 69 concrete5/concrete5 67 shopware/platform 58 craftcms/cms 52 baserproject/basercms 47 shopware/core 45 mautic/core 44 nilsteampassnet/teampass 42 showdoc/showdoc 41 mantisbt/mantisbt 41 froxlor/froxlor 40 intelliants/subrion 39 snipe/snipe-it 36 zendframework/zendframework1 34 getgrav/grav 30 shopware/shopware 30 mediawiki/core 28 centreon/centreon 27 prestashop/prestashop 26 contao/core-bundle 25 getkirby/cms 24 magento/core 24 pocketmine/pocketmine-mp 24 zendframework/zendframework 23 simplesamlphp/simplesamlphp 23 grumpydictator/firefly-iii 23 remdex/livehelperchat 23 phpoffice/phpexcel 23 laravel/framework 23 tribalsystems/zenario 22 phpoffice/phpspreadsheet 21 funadmin/funadmin 20 cockpit-hq/cockpit 20 topthink/framework 19 forkcms/forkcms 18 contao/contao 18 genix/cms 18 francoisjacquet/rosariosis 17 opencart/opencart 17 ezsystems/ezpublish-kernel 17 typo3/cms-backend 17 yetiforce/yetiforce-crm 17 symfony/security 17 openmage/magento-lts 17 cakephp/cakephp 17 october/system 16 phpbb/phpbb 16 smarty/smarty 15 silverstripe/cms 15 ec-cube/ec-cube 15 symfony/security-http 15 pimcore/admin-ui-classic-bundle 15 bolt/bolt 15 phpmailer/phpmailer 14 feehi/cms 14 dompdf/dompdf 14 codeigniter4/framework 14 modx/revolution 14 admidio/admidio 13 impresscms/impresscms 13 sylius/sylius 13 lavalite/cms 13 studio-42/elfinder 13 phpmyfaq/phpmyfaq 13 yeswiki/yeswiki 13 elefant/cms 13 alextselegidis/easyappointments 12 wallabag/wallabag 12 symfony/http-foundation 12 wwbn/avideo 12 tinymce/tinymce 11 nukeviet/nukeviet 11 sulu/sulu 11 yiisoft/yii2 11 tinymce 11 feehi/feehicms 11 TinyMCE 11 leantime/leantime 11 october/october 11 pagekit/pagekit 11 ezsystems/ezplatform-kernel 11 ezsystems/ezpublish-legacy 10 ssddanbrown/bookstack 10 spatie/browsershot 10 bootstrap 9 twig/twig 9 statamic/cms 9 billz/raspap-webgui 9 concrete5/core 9 org.webjars:bootstrap 9 pterodactyl/panel 9 ezsystems/ezplatform-admin-ui 9 croogo/croogo 9 in2code/powermail 9 contao/core 9 pimcore/customer-management-framework-bundle 9 in2code/femanager 9 bootstrap 9 kevinpapst/kimai2 9 bootstrap 9 twbs/bootstrap 9 facturascripts/facturascripts 8 silverstripe/admin 8 directmailteam/direct-mail 8 codiad/codiad 8 starcitizentools/citizen-skin 8 silverstripe/graphql 8 flarum/core 8 october/cms 8 tecnickcom/tcpdf 8 joomla/joomla-cms 8 gilacms/gila 8 composer/composer 8 bootstrap.sass 7 symfony/http-kernel 7 wpglobus/wpglobus 7 redaxo/source 7 yiisoft/yii2-dev 7 october/backend 7 backdrop/backdrop 7 bootstrap-sass 7 passbolt/passbolt_api 7 simplesamlphp/saml2 7 shopxo/shopxo 7 drupal/core-recommended 6 yourls/yourls 6 guzzlehttp/guzzle 6 api-platform/core 6 icecoder/icecoder 6 typo3/cms-install 6 oro/platform 6 vrana/adminer 6 gleez/cms 6 nystudio107/craft-seomatic 6 phpseclib/phpseclib 6 zoujingli/thinkadmin 6 bagisto/bagisto 6 adodb/adodb-php 6 bootstrap-sass 6 dweeves/magmi 6 pear/archive_tar 6 woocommerce/woocommerce 5 ibexa/admin-ui 5 tcg/voyager 5 ibexa/core 5 limesurvey/limesurvey 5 cachethq/cachet 5 gugoan/economizzer 5 phpservermon/phpservermon 5 illuminate/database 5 silverstripe/assets 5 phpxmlrpc/phpxmlrpc 5 thinkcmf/thinkcmf 5 typo3/flow 5 mautic/core-lib 5 elgg/elgg 5 bottelet/flarepoint 5 symfony/security-core 5 symfony/security-bundle 5 juzaweb/cms 5 neos/flow 5 kimai/kimai 5 anchorcms/anchor-cms 5 neos/neos 5 getformwork/formwork 5 yiisoft/yii 4 typo3/cms-frontend 4 typo3/html-sanitizer 4 flarum/framework 4 codeigniter4/shield 4 drupal/ai 4 pyrocms/pyrocms 4 ckeditor4 4 magento/product-community-edition 4 automad/automad 4 bref/bref 4 ezsystems/ezplatform 4 oro/commerce 4 wintercms/winter 4 sylius/resource-bundle 4 idno/known 4 livewire/livewire 4 league/commonmark 4 pixelfed/pixelfed 4 typo3/cms-form 4 sjbr/sr-feuser-register 4

Filter by Repository

https://github.com/symfony/symfony 15