symfony/routing vulnerabilities (Packagist)
4 vulnerabilities.
-
symfony/routingPackagist Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization 5.1 Medium -
symfony/routingPackagist Symfony: UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injection 2.3 Low -
symfony/routingPackagist Symfony XXE security vulnerability 7.5 High -
symfony/routingPackagist Symfony Allows URI Restrictions Bypass Via Double-Encoded String 6.4 Medium