symfony/ux-live-component vulnerabilities (Packagist)
6 vulnerabilities.
symfony/ux-live-componentPackagistSymfony UX: CSRF Protection Bypass in symfony/ux-live-component — Accept Header is CORS-Safelisted2.1 Lowsymfony/ux-live-componentPackagistSymfony UX: LiveComponentHydrator HMAC checksum lacks component and slot binding6.9 Mediumsymfony/ux-live-componentPackagistSymfony UX: XSS in symfony/ux-live-component via attacker-controlled child component tag2.3 Lowsymfony/ux-live-componentPackagistSymfony UX: Denial of service in symfony/ux-live-component via unbounded batch action requests5.3 Mediumsymfony/ux-live-componentPackagistSymfony UX: Format-less date LiveProps parsed with the permissive DateTime constructor6.9 Mediumsymfony/ux-live-componentPackagistsymfony/ux-live-component and symfony/ux-twig-component vulnerable to unsanitized HTML attribute injection via ComponentAttributes6.1 Medium