Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

packagist

symfony/http-client

packagist

Provides powerful methods to fetch HTTP resources synchronously or asynchronously

View on github.com · View on packagist.org

Security Advisories for symfony/http-client in packagist

Moderate
2 months ago

Symfony: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms (6to4, NAT64, Teredo, IPv4-compatible): SSRF Bypass in NoPrivateNetworkHttpClient GSA_kwCzR0hTQS0zOGN4LWNxNmYtNTc1Nc4ABYrd

packagist symfony/symfony, symfony/http-foundation, symfony/http-client
Low
almost 2 years ago

Symfony allows internal address and port enumeration by NoPrivateNetworkHttpClient GSA_kwCzR0hTQS05YzN4LXIzd3AtbWd4bc4ABBBd

packagist symfony/symfony, symfony/http-client

Filter by Severity

Moderate 1 Low 1