symfony/security-http
Symfony Security Component - HTTP Integration
Security Advisories for symfony/security-http in packagist
High
2 months ago
Symfony: Security Firewall Bypass via failure_forward Subrequest: Unauthenticated Access to access_control-Protected GET Routes
packagist
symfony/symfony, symfony/security-http
Moderate
3 months ago
Symfony's Cas2Handler Derives CAS service URL from Client Host Header → Cross-Service Ticket Replay
packagist
symfony/symfony, symfony/security-http
Moderate
3 months ago
Symfony's OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claims
packagist
symfony/symfony, symfony/security-http
High
3 months ago
Symfony Vulnerable to Identity Spoofing via Unanchored DN Regex in X509Authenticator
packagist
symfony/symfony, symfony/security-http
High
almost 2 years ago
Symfony has an Authentication Bypass via RememberMe
packagist
symfony/security-http
Moderate
almost 3 years ago
Symfony possible session fixation vulnerability
packagist
symfony/symfony, symfony/security-http
High
over 4 years ago
Symphony Denial of Service Via Overlong Usernames
packagist
symfony/symfony, symfony/security, symfony/security-http
High
over 4 years ago
Symfony Vulnerable to Timing Attack
packagist
symfony/symfony, symfony/security, symfony/security-http, symfony/form
Moderate
over 4 years ago
Symfony Open Redirect
packagist
symfony/symfony, symfony/security, symfony/security-http
Moderate
about 5 years ago
Authentication granted to all firewalls instead of just one
packagist
symfony/symfony, symfony/security-http
High
over 6 years ago
Firewall configured with unanimous strategy was not actually unanimous in Symfony
packagist
symfony/security-http, symfony/security
Moderate
over 6 years ago
User enumeration leak using switch user functionality in Symfony
packagist
symfony/symfony, symfony/security-http