Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

packagist

symfony/http-foundation

packagist

Defines an object-oriented layer for the HTTP specification

View on github.com · View on packagist.org

Security Advisories for symfony/http-foundation in packagist

High
2 days ago

Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header GSA_kwCzR0hTQS1yOTI1LW1ndnItaDljY84AB_qv

packagist symfony/symfony, symfony/http-foundation
Moderate
5 months ago

Symfony: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms (6to4, NAT64, Teredo, IPv4-compatible): SSRF Bypass in NoPrivateNetworkHttpClient GSA_kwCzR0hTQS0zOGN4LWNxNmYtNTc1Nc4ABYrd

packagist symfony/symfony, symfony/http-foundation, symfony/http-client
High
12 months ago

Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass GSA_kwCzR0hTQS0zcmc3LXdmMzctNTRybc4ABOfg

packagist symfony/symfony, symfony/http-foundation
Low
almost 2 years ago

Symfony vulnerable to open redirect via browser-sanitized URLs GSA_kwCzR0hTQS1tcnF4LXJwM3ctanBqcM4ABBBf

packagist symfony/http-foundation
Moderate
over 2 years ago

Symfony has unsafe methods in the Request class GSA_kwCzR0hTQS1wNjg0LWY3ZmgtanYyas4AA8jb

packagist symfony/symfony, symfony/http-foundation
Moderate
over 2 years ago

Symfony has a security issue when parsing the Authorization header GSA_kwCzR0hTQS1oN3YyLTJxd2ctaDgyOc4AA8ja

packagist symfony/symfony, symfony/http-foundation
High
over 2 years ago

Symfony vulnerable to denial of service via a malicious HTTP Host header GSA_kwCzR0hTQS12Nzd2LXg2MzQtOW01Ns4AA8jZ

packagist symfony/symfony, symfony/http-foundation
Moderate
over 2 years ago

Symfony2 security issue when the trust proxy mode is enabled GSA_kwCzR0hTQS12Zm02LXIyZ2MtcHd3d84AA8jY

packagist symfony/symfony, symfony/http-foundation
Moderate
over 4 years ago

Symfony Allows URI Restrictions Bypass Via Double-Encoded String GSA_kwCzR0hTQS04M2MzLXF4MjctMnJ3cs4AAfXs

packagist symfony/symfony, symfony/security, symfony/routing, symfony/http-foundation
Moderate
over 4 years ago

Symfony DoS GSA_kwCzR0hTQS1yMnJxLTNoNTYtZnFtNM4AATu7

packagist symfony/http-foundation, symfony/symfony
Moderate
over 4 years ago

Symfony HTTP Foundation web cache poisoning GSA_kwCzR0hTQS04d2dqLTZ3eDgtaDVocc3r4Q

packagist symfony/symfony, symfony/http-foundation
Moderate
over 4 years ago

Symfony Host Header Injection vulnerability in the HttpFoundation component GSA_kwCzR0hTQS0yMnB2LTd2OWotaHF4cM3grg

packagist symfony/http-foundation
Critical
almost 7 years ago

Invalid HTTP method overrides allow possible XSS or other attacks in Symfony MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXg5Mmgtd21nMi02aHA3

packagist symfony/symfony, symfony/http-foundation
High
almost 7 years ago

Argument injection in a MimeTypeGuesser in Symfony MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXhoaDYtOTU2cS00cTY5

packagist symfony/symfony, symfony/mime, symfony/http-foundation

Match affected ranges for this package. Potential advisories inferred from related packages are excluded.

Filter by Severity

Moderate 8 High 4 Low 1 Critical 1