Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

packagist symfony/symfony Security Advisories

Moderate

GSA_kwCzR0hTQS03MngyLTVjODUtNndtcs4AA3Cz

Symfony potential Cross-site Scripting in WebhookController
Ecosystems: packagist
Packages: symfony/symfony, symfony/webhook
Source: GitHub Advisory Database
Blast Radius: 26.6
Published: 5 months ago

Moderate

GSA_kwCzR0hTQS1xODQ3LTJxNTctd21yM84AA3Cy

Symfony potential Cross-site Scripting vulnerabilities in CodeExtension filters
Ecosystems: packagist
Packages: symfony/symfony, symfony/twig-bridge
Source: GitHub Advisory Database
Blast Radius: 28.6
Published: 5 months ago

Moderate

GSA_kwCzR0hTQS1tMndqLXI2ZzMtZnhmeM4AA3Cx

Symfony possible session fixation vulnerability
Ecosystems: packagist
Packages: symfony/symfony, symfony/security-http
Source: GitHub Advisory Database
Blast Radius: 28.5
Published: 5 months ago

Moderate

GSA_kwCzR0hTQS1oN3ZmLTV3cnYtOWZods4AAxVO

Symfony storing cookie headers in HttpCache
Ecosystems: packagist
Packages: symfony/symfony, symfony/http-kernel
Source: GitHub Advisory Database
Blast Radius: 33.8
Published: about 1 year ago

Moderate

GSA_kwCzR0hTQS0zZ3YyLTI5cWMtdjY3bc4AAxVN

Symfony vulnerable to Session Fixation of CSRF tokens
Ecosystems: packagist
Packages: symfony/symfony, symfony/security-bundle
Source: GitHub Advisory Database
Blast Radius: 28.9
Published: about 1 year ago

Critical

GSA_kwCzR0hTQS1xODd2LXE4ZnctZ21qNc4AAgyh

Symfony Incorrect Access Control
Ecosystems: packagist
Packages: symfony/symfony, symfony/security, symfony/security-core
Source: GitHub Advisory Database
Blast Radius: 45.6
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS04OWNwLWZ2Y2MtaHhoN84AAfYj

Symfony Access Control Vulnerability
Ecosystems: packagist
Packages: symfony/symfony
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS04M2MzLXF4MjctMnJ3cs4AAfXs

Symfony Allows URI Restrictions Bypass Via Double-Encoded String
Ecosystems: packagist
Packages: symfony/symfony, symfony/security, symfony/routing, symfony/http-foundation
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

High

GSA_kwCzR0hTQS1qang1LWZxNWctOHhwY84AAdU8

Symfony Cryptographic Vulnerability
Ecosystems: packagist
Packages: symfony/symfony, symfony/security, symfony/security-core
Source: GitHub Advisory Database
Blast Radius: 34.9
Published: almost 2 years ago

High

GSA_kwCzR0hTQS1nOTdjLWpmeDYteHZ4aM4AAcl9

Symfony Vulnerable to Timing Attack
Ecosystems: packagist
Packages: symfony/symfony, symfony/security, symfony/security-http, symfony/form
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS1xbXF3LW1wcXAtbXI1NM4AAcRE

Symfony Incorrect Access Control
Ecosystems: packagist
Packages: symfony/http-kernel, symfony/symfony
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

High

GSA_kwCzR0hTQS03dzUzLWhmcHctcmczZ84AAZ60

Symfony Arbitrary PHP code Execution
Ecosystems: packagist
Packages: symfony/yaml, symfony/symfony
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

Critical

GSA_kwCzR0hTQS13dmo1LXI3OHItaGhmcc4AAWjw

Symfony Authentication Bypass
Ecosystems: packagist
Packages: symfony/symfony, symfony/security, symfony/security-core
Source: GitHub Advisory Database
Blast Radius: 45.6
Published: almost 2 years ago

Low

GSA_kwCzR0hTQS1qNWpoLWhwcjQtaDMzMs4AAV_7

Symfony Session Fixation Vulnerability
Ecosystems: packagist
Packages: symfony/security, symfony/security-http, symfony/symfony
Source: GitHub Advisory Database
Blast Radius: 13.6
Published: almost 2 years ago

High

GSA_kwCzR0hTQS02NnA2LTdwMjktNTVwOc4AAVWh

Symfony Host Header Injection
Ecosystems: packagist
Packages: symfony/symfony
Source: GitHub Advisory Database
Blast Radius: 31.4
Published: almost 2 years ago

High

GSA_kwCzR0hTQS1nNHJnLXJ3NjUtOGhmZ84AAT6-

Moderate

GSA_kwCzR0hTQS1yN3A3LXFyN3AtMnJyZs4AAT52

Symfony Open Redirect
Ecosystems: packagist
Packages: symfony/security, symfony/security-http, symfony/symfony
Source: GitHub Advisory Database
Blast Radius: 26.8
Published: almost 2 years ago

High

GSA_kwCzR0hTQS1jNDlyLThnajYtNzY4cs4AAT5H

Symfony Directory Traversal
Ecosystems: packagist
Packages: symfony/symfony, symfony/intl
Source: GitHub Advisory Database
Blast Radius: 33.7
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS03aHdjLTJjcTQtNngyd84AAT5V

Symfony Open Redirect
Ecosystems: packagist
Packages: symfony/security-bundle, symfony/symfony
Source: GitHub Advisory Database
Blast Radius: 28.0
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS1yMnJxLTNoNTYtZnFtNM4AATu7

Symfony DoS
Ecosystems: packagist
Packages: symfony/http-foundation, symfony/symfony
Source: GitHub Advisory Database
Blast Radius: 33.8
Published: almost 2 years ago

High

GSA_kwCzR0hTQS1nNGc3LXE3MjYtdjVoZ84AATux

Symfony CSRF Token Fixation
Ecosystems: packagist
Packages: symfony/security, symfony/security-http, symfony/security-bundle, symfony/symfony
Source: GitHub Advisory Database
Blast Radius: 40.4
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS14M2NmLXc2NHgtNGNwMs4AATfM

Symfony Path Disclosure
Ecosystems: packagist
Packages: symfony/form, symfony/symfony
Source: GitHub Advisory Database
Blast Radius: 24.6
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS05Mng2LWgyZ3ItOGd4cc4AASJF

Symfony CSRF Vulnerability
Ecosystems: packagist
Packages: symfony/symfony, symfony/security, symfony/security-csrf
Source: GitHub Advisory Database
Blast Radius: 26.6
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS04d2dqLTZ3eDgtaDVocc3r4Q

Symfony HTTP Foundation web cache poisoning
Ecosystems: packagist
Packages: symfony/symfony, symfony/http-foundation
Source: GitHub Advisory Database
Blast Radius: 37.2
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS0yMnB2LTd2OWotaHF4cM3grg

Symfony Host Header Injection vulnerability in the HttpFoundation component
Ecosystems: packagist
Packages: symfony/http-foundation, symfony/symfony
Source: GitHub Advisory Database
Blast Radius: 34.9
Published: almost 2 years ago

High

GSA_kwCzR0hTQS1xOGo3LWZqaDctMjV2Nc3gFg

Symfony collectionCascaded and collectionCascadedDeeply fields security bypass
Ecosystems: packagist
Packages: symfony/symfony, symfony/validator
Source: GitHub Advisory Database
Blast Radius: 38.8
Published: almost 2 years ago

High

GSA_kwCzR0hTQS1xOGhnLXBmOHYtY3hyds02BA

Symfony Http-Kernel has non-constant time comparison in UriSigner
Ecosystems: packagist
Packages: symfony/symfony, symfony/http-kernel
Source: GitHub Advisory Database
Blast Radius: 46.4
Published: about 2 years ago

High

GSA_kwCzR0hTQS12dm1yLTg4MjktNndoeM0n8Q

CSRF token missing in Symfony
Ecosystems: packagist
Packages: symfony/symfony, symfony/framework-bundle
Source: GitHub Advisory Database
Blast Radius: 38.7
Published: about 2 years ago

Moderate

GSA_kwCzR0hTQS0yeGhnLXcyZzUtdzk1eM0YGA

CSV Injection in symfony/serializer
Ecosystems: packagist
Packages: symfony/symfony, symfony/serializer
Source: GitHub Advisory Database
Blast Radius: 30.5
Published: over 2 years ago

Moderate

GSA_kwCzR0hTQS1xdzM2LXA5N3ctdmNxcs0YFw

Cookie persistence after password changes in symfony/security-bundle
Ecosystems: packagist
Packages: symfony/symfony, symfony/security-bundle
Source: GitHub Advisory Database
Blast Radius: 29.8
Published: over 2 years ago

Moderate

GSA_kwCzR0hTQS1xM2ozLXczN3gtaHEycc0YFQ

Webcache Poisoning in symfony/http-kernel
Ecosystems: packagist
Packages: symfony/symfony, symfony/http-kernel
Source: GitHub Advisory Database
Blast Radius: 37.2
Published: over 2 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJmY2YtbTY3bS1qY3Jx

Authentication granted to all firewalls instead of just one
Ecosystems: packagist
Packages: symfony/symfony, symfony/security-http
Source: GitHub Advisory Database
Blast Radius: 29.9
Published: almost 3 years ago

Low

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWcycWotcG14bS05Zjhm

User enumeration in authentication mechanisms
Ecosystems: packagist
Packages: symfony/symfony, symfony/security-http
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 3 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVwdjgtcHB2ai00aDY4

Prevent user enumeration using Guard or the new Authenticator-based Security
Ecosystems: packagist
Packages: symfony/symfony, symfony/security, symfony/security-http, symfony/maker-bundle, lexik/jwt-authentication-bundle, symfony/security-core, symfony/security-guard
Source: GitHub Advisory Database
Blast Radius: 24.7
Published: almost 3 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc1NGgtNXIyNy03eDNy

RCE in Symfony
Ecosystems: packagist
Packages: symfony/symfony, symfony/http-kernel
Source: GitHub Advisory Database
Blast Radius: 46.4
Published: over 3 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWc0bTktNWhwZi1oeDcy

Firewall configured with unanimous strategy was not actually unanimous in Symfony
Ecosystems: packagist
Packages: symfony/symfony, symfony/security-http, symfony/security
Source: GitHub Advisory Database
Blast Radius: 33.4
Published: about 4 years ago

Moderate

Advisories: 17,466
Packages: 8,120
Repositories: 2
Ecosystems: 12

Filter by Severity

Moderate 7,469 High 6,099 Critical 2,660 Low 957

Filter by Ecosystem

maven 5,491 npm 3,495 pypi 3,463 packagist 3,212 go 1,835 nuget 1,388 rubygems 812 cargo 771 swift 31 hex 29 actions 16 pub 8

Filter by Package

moodle/moodle 249 magento/community-edition 181 pimcore/pimcore 111 typo3/cms 94 microweber/microweber 91 typo3/cms-core 70 thorsten/phpmyfaq 70 dolibarr/dolibarr 56 phpmyadmin/phpmyadmin 53 concrete5/concrete5 52 librenms/librenms 49 shopware/platform 47 symfony/symfony 47 baserproject/basercms 43 showdoc/showdoc 40 craftcms/cms 36 shopware/core 35 snipe/snipe-it 32 intelliants/subrion 31 drupal/core 30 froxlor/froxlor 28 centreon/centreon 27 silverstripe/framework 27 shopware/shopware 26 getgrav/grav 24 magento/core 24 mautic/core 24 prestashop/prestashop 23 pocketmine/pocketmine-mp 23 remdex/livehelperchat 23 nilsteampassnet/teampass 22 getkirby/cms 22 grumpydictator/firefly-iii 22 drupal/drupal 19 forkcms/forkcms 18 tribalsystems/zenario 18 francoisjacquet/rosariosis 17 cockpit-hq/cockpit 17 cakephp/cakephp 17 yetiforce/yetiforce-crm 16 openmage/magento-lts 15 contao/core-bundle 15 phpmailer/phpmailer 14 typo3/cms-backend 14 symfony/security 13 ezsystems/ezpublish-kernel 13 impresscms/impresscms 13 october/system 13 studio-42/elfinder 12 phpmyfaq/phpmyfaq 12 symfony/security-http 12 elefant/cms 12 lavalite/cms 12 smarty/smarty 12 feehi/feehicms 11 zendframework/zendframework1 11 silverstripe/cms 11 feehi/cms 11 contao/contao 11 topthink/framework 11 ezsystems/ezplatform-kernel 10 admidio/admidio 10 wwbn/avideo 10 pimcore/admin-ui-classic-bundle 10 wallabag/wallabag 10 codeigniter4/framework 10 dompdf/dompdf 10 sylius/sylius 9 laravel/framework 9 funadmin/funadmin 9 ssddanbrown/bookstack 9 october/october 9 kevinpapst/kimai2 9 concrete5/core 9 tinymce/tinymce 9 alextselegidis/easyappointments 9 simplesamlphp/simplesamlphp 9 TinyMCE 9 tinymce 9 facturascripts/facturascripts 8 october/cms 8 zendframework/zendframework 8 sulu/sulu 8 gilacms/gila 8 pimcore/customer-management-framework-bundle 8 symfony/http-foundation 7 october/backend 7 silverstripe/graphql 7 silverstripe/admin 7 statamic/cms 7 croogo/croogo 7 flarum/core 7 guzzlehttp/guzzle 6 nystudio107/craft-seomatic 6 pterodactyl/panel 6 backdrop/backdrop 6 directmailteam/direct-mail 6 in2code/femanager 6 composer/composer 6 pagekit/pagekit 6 yourls/yourls 6 symfony/http-kernel 5 vrana/adminer 5 phpxmlrpc/phpxmlrpc 5 automad/automad 5 cachethq/cachet 5 billz/raspap-webgui 5 dweeves/magmi 5 typo3/cms-install 5 phpseclib/phpseclib 5 bolt/bolt 5 elgg/elgg 5 yiisoft/yii2 5 bottelet/flarepoint 5 oro/platform 5 ibexa/core 5 anchorcms/anchor-cms 5 pear/archive_tar 5 gugoan/economizzer 5 bagisto/bagisto 5 nukeviet/nukeviet 4 bref/bref 4 spatie/browsershot 4 oro/commerce 4 silverstripe/assets 4 typo3/html-sanitizer 4 wintercms/winter 4 idno/known 4 shopware/storefront 4 notrinos/notrinos-erp 4 ezsystems/ezplatform-admin-ui 4 codeigniter4/shield 4 bytefury/crater 4 phpservermon/phpservermon 4 magento/product-community-edition 4 woocommerce/woocommerce 4 typo3/cms-frontend 4 symfony/security-core 4 symfony/security-bundle 4 zendframework/zendrest 3 zendframework/zendservice-audioscrobbler 3 froala/wysiwyg-editor 3 zendframework/zendservice-nirvanix 3 shopxo/shopxo 3 enhavo/enhavo-app 3 phenx/php-svg-lib 3 facade/ignition 3 sylius/resource-bundle 3 processwire/processwire 3 artesaos/seotools 3 apache-solr-for-typo3/solr 3 icecoder/icecoder 3 flarum/framework 3 modx/revolution 3 opencart/opencart 3 rudloff/alltube 3 zendframework/zendopenid 3 phpbb/phpbb 3 appwrite/server-ce 3 kimai/kimai 3 adodb/adodb-php 3 mantisbt/mantisbt 3 pixelfed/pixelfed 3 yiisoft/yii2-dev 3 ckeditor4 3 phpoffice/phpspreadsheet 3 uvdesk/community-skeleton 3 typo3/cms-form 3 zendframework/zendservice-amazon 3 verot/class.upload.php 3 illuminate/database 3 prestashop/productcomments 3 codeigniter/framework 3 limesurvey/limesurvey 3 zendframework/zendservice-windowsazure 3 enshrined/svg-sanitize 3 zendframework/zendservice-technorati 3 joomla/framework 3 twig/twig 3 zendframework/zendservice-slideshare 3 joomla/joomla-cms 3 zencart/zencart 3 zendframework/zendservice-api 3 tpwd/ke_search 2 helloxz/imgurl 2 austintoddj/canvas 2 juzaweb/cms 2 reportico-web/reportico 2 yoast-seo-for-typo3/yoast_seo 2 athlon1600/php-proxy 2 orchid/platform 2 amphp/http-client 2 ether/logs 2 topthink/think 2 badaso/core 2 buddypress/buddypress 2 getkirby/panel 2 tecnickcom/tcpdf 2 prestashop/blockreassurance 2 pyrocms/pyrocms 2

Filter by Repository

https://github.com/symfony/symfony 40