Advisories for packages from symfony

Listing reported advisories for packages from symfony sorted by their report date.

CVE-2021-41267: Webcache Poisoning via X-Forwarded-Prefix and sub-request
FriendsOfPHP

symfony/http-kernel

>=5.3.0, <5.3.12 · >=5.2.0, <5.3.0

2021-10-09 12:10:44
CVE-2021-41267: Webcache Poisoning via X-Forwarded-Prefix and sub-request
FriendsOfPHP

symfony/symfony

>=5.3.0, <5.3.12 · >=5.2.0, <5.3.0

2021-10-09 12:10:44
CVE-2021-32693: Authentication granted to all firewalls instead of just one
FriendsOfPHP

symfony/security-http

>=5.3.0, <5.3.2

2021-06-17 15:00:00
CVE-2021-32693: Authentication granted to all firewalls instead of just one
FriendsOfPHP

symfony/symfony

>=5.3.0, <5.3.2

2021-06-17 15:00:00
CVE-2021-21424: Prevent user enumeration via response content in authentication mechanisms
FriendsOfPHP

symfony/maker-bundle

>=1.31.0, <1.31.1 · >=1.30.0, <1.31.0 · >=1.29.0, <1.29.2 · >=1.28.0, <1.29.0 · >=1.27.0, <1.28.0

2021-05-18 16:31:23
User enumeration in authentication mechanisms
GitHub

symfony/security-http

>= 5.1.0, < 5.2.8

2021-05-17 19:21:55
CVE-2021-21424: Prevent user enumeration via response content in authentication mechanisms
FriendsOfPHP

symfony/security

>=4.4.0, <4.4.24 · >=3.4.0, <3.4.49 · >=4.3.0, <4.4.0 · >=4.2.0, <4.3.0 · >=4.1.0, <4.2.0 · >=4.0.0, <4.1.0 · >=3.3.0, <3.4.0 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0 · >=2.8.0, <3.0.0

2021-05-12 08:00:00
CVE-2021-21424: Prevent user enumeration via response content in authentication mechanisms
FriendsOfPHP

symfony/security-core

>=4.4.0, <4.4.24 · >=3.4.0, <3.4.49 · >=5.2.0, <5.2.9 · >=5.1.0, <5.2.0 · >=5.0.0, <5.1.0 · >=4.3.0, <4.4.0 · >=4.2.0, <4.3.0 · >=4.1.0, <4.2.0 · >=4.0.0, <4.1.0 · >=3.3.0, <3.4.0 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0 · >=2.8.0, <3.0.0

2021-05-12 08:00:00
CVE-2021-21424: Prevent user enumeration via response content in authentication mechanisms
FriendsOfPHP

symfony/security-guard

>=4.4.0, <4.4.23 · >=3.4.0, <3.4.48 · >=5.2.0, <5.2.8 · >=5.1.0, <5.2.0 · >=5.0.0, <5.1.0 · >=4.3.0, <4.4.0 · >=4.2.0, <4.3.0 · >=4.1.0, <4.2.0 · >=4.0.0, <4.1.0 · >=3.3.0, <3.4.0 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0 · >=2.8.0, <3.0.0

2021-05-12 08:00:00
CVE-2021-21424: Prevent user enumeration via response content in authentication mechanisms
FriendsOfPHP

symfony/security-http

>=5.2.0, <5.2.8 · >=5.1.0, <5.2.0

2021-05-12 08:00:00
CVE-2021-21424: Prevent user enumeration via response content in authentication mechanisms
FriendsOfPHP

symfony/symfony

>=4.4.0, <4.4.24 · >=3.4.0, <3.4.49 · >=5.2.0, <5.2.9 · >=5.1.0, <5.2.0 · >=5.0.0, <5.1.0 · >=4.3.0, <4.4.0 · >=4.2.0, <4.3.0 · >=4.1.0, <4.2.0 · >=4.0.0, <4.1.0 · >=3.3.0, <3.4.0 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0 · >=2.8.0, <3.0.0

2021-05-12 08:00:00
CVE-2020-15094: Prevent RCE when calling untrusted remote with CachingHttpClient
FriendsOfPHP

symfony/http-kernel

>=4.4.0, <4.4.13 · >=5.1.0, <5.1.5 · >=5.0.0, <5.1.0 · >=4.3.0, <4.4.0

2020-09-02 08:00:00
CVE-2020-15094: Prevent RCE when calling untrusted remote with CachingHttpClient
FriendsOfPHP

symfony/symfony

>=4.4.0, <4.4.13 · >=5.1.0, <5.1.5 · >=5.0.0, <5.1.0 · >=4.3.0, <4.4.0

2020-09-02 08:00:00
Firewall configured with unanimous strategy was not actually unanimous in Symfony
GitHub

symfony/security

>= 5.0.0, < 5.0.7 · >= 4.4.0, < 4.4.7

2020-03-30 19:45:29
Prevent cache poisoning via a Response Content-Type header in Symfony
GitHub

symfony/http-foundation

>= 5.0.0, < 5.0.7 · >= 4.4.0, < 4.4.7

2020-03-30 19:29:00
CVE-2020-5274: Fix Exception message escaping rendered by ErrorHandler
FriendsOfPHP

symfony/error-handler

>=5.0.0, <5.0.4 · >=4.4.0, <4.4.4

2020-03-30 14:00:00
CVE-2020-5255: Prevent cache poisoning via a Response Content-Type header
FriendsOfPHP

symfony/http-foundation

>=5.0.0, <5.0.7 · >=4.4.0, <4.4.7

2020-03-30 14:00:00
CVE-2020-5275: All rules set in "access_control" are required when the firewall is configured with the unanimous strategy
FriendsOfPHP

symfony/security

>=4.4.0, <4.4.7

2020-03-30 14:00:00
CVE-2020-5275: All rules set in "access_control" are required when the firewall is configured with the unanimous strategy
FriendsOfPHP

symfony/security-http

>=5.0.0, <5.0.7 · >=4.4.0, <4.4.7

2020-03-30 14:00:00
CVE-2020-5255: Prevent cache poisoning via a Response Content-Type header
FriendsOfPHP

symfony/symfony

>=5.0.0, <5.0.7 · >=4.4.0, <4.4.7

2020-03-30 14:00:00
CVE-2020-5274: Fix Exception message escaping rendered by ErrorHandler
FriendsOfPHP

symfony/symfony

>=5.0.0, <5.0.4 · >=4.4.0, <4.4.4

2020-03-30 14:00:00
CVE-2020-5275: All rules set in "access_control" are required when the firewall is configured with the unanimous strategy
FriendsOfPHP

symfony/symfony

>=5.0.0, <5.0.7 · >=4.4.0, <4.4.7

2020-03-30 14:00:00
Improper Input Validation in Symfony
GitHub

symfony/symfony

>= 4.2.0, < 4.2.12 · >= 4.3.0, < 4.3.8

2020-02-11 20:39:30
Improper authentication in Symfony
GitHub

symfony/security-http

>= 4.0.0, < 4.1.12 · >= 3.0.0, < 3.4.26 · >= 2.8.0, < 2.8.50 · >= 2.7.0, < 2.7.51 · >= 4.2.0, < 4.2.7

2020-02-11 20:17:10
Invalid HTTP method overrides allow possible XSS or other attacks in Symfony
GitHub

symfony/http-foundation

>= 4.0.0, < 4.1.12 · >= 3.0.0, < 3.4.26 · >= 2.8.0, < 2.8.50 · >= 2.7.0, < 2.7.51 · >= 4.2.0, < 4.2.7

2019-12-01 19:49:37
User enumeration leak using switch user functionality in Symfony
GitHub

symfony/security-http

>= 4.1.0, < 4.2.12 · >= 4.3.0, < 4.3.8

2019-12-01 19:47:28
Argument injection in a MimeTypeGuesser in Symfony
GitHub

symfony/http-foundation

>= 4.0.0, < 4.2.12 · >= 3.0.0, < 3.4.35 · >= 2.0.0, < 2.8.52 · >= 4.3.0, < 4.3.8

2019-12-01 19:46:15
CVE-2019-18889: Forbid serializing AbstractAdapter and TagAwareAdapter instances
FriendsOfPHP

symfony/cache

>=4.2.0, <4.2.12 · >=3.4.0, <3.4.35 · >=4.3.0, <4.3.8 · >=4.1.0, <4.2.0 · >=4.0.0, <4.1.0 · >=3.3.0, <3.4.0 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0

2019-11-13 08:00:00
CVE-2019-18888: Prevent argument injection in a MimeTypeGuesser
FriendsOfPHP

symfony/http-foundation

>=4.2.0, <4.2.12 · >=3.4.0, <3.4.35 · >=2.8.0, <2.8.52 · >=4.3.0, <4.3.8 · >=4.1.0, <4.2.0 · >=4.0.0, <4.1.0 · >=3.3.0, <3.4.0 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0 · >=2.7.0, <2.8.0 · >=2.6.0, <2.7.0 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0 · >=2.3.0, <2.4.0 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2019-11-13 08:00:00
CVE-2019-18887: Use constant time comparison in UriSigner
FriendsOfPHP

symfony/http-kernel

>=4.2.0, <4.2.12 · >=3.4.0, <3.4.35 · >=2.8.0, <2.8.52 · >=4.3.0, <4.3.8 · >=4.1.0, <4.2.0 · >=4.0.0, <4.1.0 · >=3.3.0, <3.4.0 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0 · >=2.7.0, <2.8.0 · >=2.6.0, <2.7.0 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0 · >=2.3.0, <2.4.0 · >=2.2.0, <2.3.0

2019-11-13 08:00:00
CVE-2019-18888: Prevent argument injection in a MimeTypeGuesser
FriendsOfPHP

symfony/mime

>=4.3.0, <4.3.8

2019-11-13 08:00:00
CVE-2019-18886: Prevent user enumeration using switch user functionality
FriendsOfPHP

symfony/security-http

>=4.2.0, <4.2.12 · >=4.3.0, <4.3.8 · >=4.1.0, <4.2.0

2019-11-13 08:00:00
CVE-2019-11325: Fix escaping of strings in VarExporter
FriendsOfPHP

symfony/symfony

>=4.2.0, <4.2.12 · >=4.3.0, <4.3.8

2019-11-13 08:00:00
CVE-2019-18886: Prevent user enumeration using switch user functionality
FriendsOfPHP

symfony/symfony

>=4.2.0, <4.2.12 · >=4.3.0, <4.3.8 · >=4.1.0, <4.2.0

2019-11-13 08:00:00
CVE-2019-18887: Use constant time comparison in UriSigner
FriendsOfPHP

symfony/symfony

>=4.2.0, <4.2.12 · >=3.4.0, <3.4.35 · >=2.8.0, <2.8.52 · >=4.3.0, <4.3.8 · >=4.1.0, <4.2.0 · >=4.0.0, <4.1.0 · >=3.3.0, <3.4.0 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0 · >=2.7.0, <2.8.0 · >=2.6.0, <2.7.0 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0 · >=2.3.0, <2.4.0 · >=2.2.0, <2.3.0

2019-11-13 08:00:00
CVE-2019-18888: Prevent argument injection in a MimeTypeGuesser
FriendsOfPHP

symfony/symfony

>=4.2.0, <4.2.12 · >=3.4.0, <3.4.35 · >=2.8.0, <2.8.52 · >=4.3.0, <4.3.8 · >=4.1.0, <4.2.0 · >=4.0.0, <4.1.0 · >=3.3.0, <3.4.0 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0 · >=2.7.0, <2.8.0 · >=2.6.0, <2.7.0 · >=2.5.0, <2.6.0 · >=2.4.0, <2.5.0 · >=2.3.0, <2.4.0 · >=2.2.0, <2.3.0 · >=2.1.0, <2.2.0 · >=2.0.0, <2.1.0

2019-11-13 08:00:00
CVE-2019-18889: Forbid serializing AbstractAdapter and TagAwareAdapter instances
FriendsOfPHP

symfony/symfony

>=4.2.0, <4.2.12 · >=3.4.0, <3.4.35 · >=4.3.0, <4.3.8 · >=4.1.0, <4.2.0 · >=4.0.0, <4.1.0 · >=3.3.0, <3.4.0 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0

2019-11-13 08:00:00
CVE-2019-11325: Fix escaping of strings in VarExporter
FriendsOfPHP

symfony/var-exporter

>=4.2.0, <4.2.12 · >=4.3.0, <4.3.8

2019-11-13 08:00:00
CVE-2019-10910: Check service IDs are valid
FriendsOfPHP

symfony/dependency-injection

>=4.1.0, <4.1.12 · >=3.4.0, <3.4.26 · >=2.8.0, <2.8.50 · >=2.7.0, <2.7.51 · >=4.2.0, <4.2.7 · >=4.0.0, <4.1.0 · >=3.3.0, <3.4.0 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0

2019-04-16 12:48:27
CVE-2019-10910: Check service IDs are valid
FriendsOfPHP

symfony/proxy-manager-bridge

>=4.1.0, <4.1.12 · >=3.4.0, <3.4.26 · >=2.8.0, <2.8.50 · >=2.7.0, <2.7.51 · >=4.2.0, <4.2.7 · >=4.0.0, <4.1.0 · >=3.3.0, <3.4.0 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0

2019-04-16 12:48:27
CVE-2019-10910: Check service IDs are valid
FriendsOfPHP

symfony/symfony

>=4.1.0, <4.1.12 · >=3.4.0, <3.4.26 · >=2.8.0, <2.8.50 · >=2.7.0, <2.7.51 · >=4.2.0, <4.2.7 · >=4.0.0, <4.1.0 · >=3.3.0, <3.4.0 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0

2019-04-16 12:48:27
CVE-2019-10909: Escape validation messages in the PHP templating engine
FriendsOfPHP

symfony/framework-bundle

>=4.1.0, <4.1.12 · >=3.4.0, <3.4.26 · >=2.8.0, <2.8.50 · >=2.7.0, <2.7.51 · >=4.2.0, <4.2.7 · >=4.0.0, <4.1.0 · >=3.3.0, <3.4.0 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0

2019-04-16 11:40:42
CVE-2019-10909: Escape validation messages in the PHP templating engine
FriendsOfPHP

symfony/symfony

>=4.1.0, <4.1.12 · >=3.4.0, <3.4.26 · >=2.8.0, <2.8.50 · >=2.7.0, <2.7.51 · >=4.2.0, <4.2.7 · >=4.0.0, <4.1.0 · >=3.3.0, <3.4.0 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0

2019-04-16 11:40:42
CVE-2019-10912: Prevent destructors with side-effects from being unserialized
FriendsOfPHP

symfony/cache

>=4.1.0, <4.1.12 · >=3.4.0, <3.4.26 · >=4.2.0, <4.2.7 · >=4.0.0, <4.1.0 · >=3.3.0, <3.4.0 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0

2019-04-16 11:01:24
CVE-2019-10912: Prevent destructors with side-effects from being unserialized
FriendsOfPHP

symfony/phpunit-bridge

>=4.1.0, <4.1.12 · >=3.4.0, <3.4.26 · >=2.8.0, <2.8.50 · >=4.2.0, <4.2.7 · >=4.0.0, <4.1.0 · >=3.3.0, <3.4.0 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0

2019-04-16 11:01:24
CVE-2019-10912: Prevent destructors with side-effects from being unserialized
FriendsOfPHP

symfony/symfony

>=4.1.0, <4.1.12 · >=3.4.0, <3.4.26 · >=2.8.0, <2.8.50 · >=4.2.0, <4.2.7 · >=4.0.0, <4.1.0 · >=3.3.0, <3.4.0 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0

2019-04-16 11:01:24
CVE-2019-10911: Add a separator in the remember me cookie hash
FriendsOfPHP

symfony/security

>=4.1.0, <4.1.12 · >=3.4.0, <3.4.26 · >=2.8.0, <2.8.50 · >=2.7.0, <2.7.51 · >=4.2.0, <4.2.7 · >=4.0.0, <4.1.0 · >=3.3.0, <3.4.0 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0

2019-04-16 10:54:35
CVE-2019-10911: Add a separator in the remember me cookie hash
FriendsOfPHP

symfony/security-http

>=4.1.0, <4.1.12 · >=3.4.0, <3.4.26 · >=2.8.0, <2.8.50 · >=2.7.0, <2.7.51 · >=4.2.0, <4.2.7 · >=4.0.0, <4.1.0 · >=3.3.0, <3.4.0 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0

2019-04-16 10:54:35
CVE-2019-10911: Add a separator in the remember me cookie hash
FriendsOfPHP

symfony/symfony

>=4.1.0, <4.1.12 · >=3.4.0, <3.4.26 · >=2.8.0, <2.8.50 · >=2.7.0, <2.7.51 · >=4.2.0, <4.2.7 · >=4.0.0, <4.1.0 · >=3.3.0, <3.4.0 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0

2019-04-16 10:54:35
CVE-2019-10913: Reject invalid HTTP method overrides
FriendsOfPHP

symfony/http-foundation

>=4.1.0, <4.1.12 · >=3.4.0, <3.4.26 · >=2.8.0, <2.8.50 · >=2.7.0, <2.7.51 · >=4.2.0, <4.2.7 · >=4.0.0, <4.1.0 · >=3.3.0, <3.4.0 · >=3.2.0, <3.3.0 · >=3.1.0, <3.2.0 · >=3.0.0, <3.1.0

2019-04-16 10:45:11
« Previous Next »

Showing 101 to 150 of 246 results

1 2 3 4 5