symfony/http-foundation vulnerabilities (Packagist)
15 vulnerabilities.
-
symfony/http-foundationPackagist Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header 8.7 High -
symfony/http-foundationPackagist Symfony: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms (6to4, NAT64, Teredo, IPv4-compatible): SSRF Bypass in NoPrivateNetworkHttpClient 6.9 Medium -
symfony/http-foundationPackagist Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass 7.3 High -
symfony/http-foundationPackagist Open redirect via browser-sanitized URLs in symfony/http-foundation 3.1 Low -
symfony/http-foundationPackagist Symfony has a security issue when parsing the Authorization header 5.3 Medium -
symfony/http-foundationPackagist Symfony vulnerable to denial of service via a malicious HTTP Host header 7.5 High -
symfony/http-foundationPackagist Symfony2 security issue when the trust proxy mode is enabled No score -
symfony/http-foundationPackagist Prevent cache poisoning via a Response Content-Type header 2.6 Low -
symfony/http-foundationPackagist Symfony Host Header Injection vulnerability in the HttpFoundation component 6.1 Medium -
symfony/http-foundationPackagist Argument injection in a MimeTypeGuesser in Symfony 7.5 High -
symfony/http-foundationPackagist Invalid HTTP method overrides allow possible XSS or other attacks in Symfony 9.8 Critical -
symfony/http-foundationPackagist Symfony HTTP Foundation web cache poisoning 6.5 Medium -
symfony/http-foundationPackagist Symfony DoS 5.9 Medium -
symfony/http-foundationPackagist Symfony Allows URI Restrictions Bypass Via Double-Encoded String 6.4 Medium -
symfony/http-foundationPackagist Symfony has unsafe methods in the Request class 5.3 Medium