symfony/web-profiler-bundle vulnerabilities (Packagist)

2 vulnerabilities.

• symfony/web-profiler-bundle Packagist Symfony: Stored XSS in WebProfiler CodeExtension::fileExcerpt() — Unescaped Non-PHP File Rendering CVE-2026-45072 Fix available 2.0 LowMay 27, 2026
• symfony/web-profiler-bundle Packagist Symfony Cross-Site Request Forgery vulnerability in the Web Profiler CVE-2014-6072 Fix available 8.1 HighMay 30, 2024