symfony/http-client vulnerabilities (Packagist)
2 vulnerabilities.
-
symfony/http-clientPackagist Symfony: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms (6to4, NAT64, Teredo, IPv4-compatible): SSRF Bypass in NoPrivateNetworkHttpClient 6.9 Medium -
symfony/http-clientPackagist Internal address and port enumeration allowed by NoPrivateNetworkHttpClient in symfony/http-client 3.1 Low