symfony/process vulnerabilities (Packagist)

2 vulnerabilities.

• symfony/process Packagist Symfony has incorrect argument escaping under MSYS2/Git Bash on Windows that can lead to destructive file operations CVE-2026-24739 Fix available 6.3 MediumJanuary 28, 2026
• symfony/process Packagist Command execution hijack on Windows with Process class in symfony/process CVE-2024-51736 Fix available 0.0 NoneNovember 6, 2024