Skip to content

symfony/dom-crawler vulnerabilities (Packagist)

1 vulnerability.

symfony/dom-crawler PackagistSymfony: XXE (Local File Disclosure) in DomCrawler::addXmlContent() via validateOnParse = trueCVE-2026-45071Public exploitFix available8.7 HighMay 27, 2026