symfony/routing vulnerabilities (TuxCare)
3 vulnerabilities.
symfony/routingTuxCareSymfony: Host Placeholders Can Match the Start of the Path in Compiled URL Matchers, Bypassing Path-Based Access Control6.3 Mediumsymfony/routingTuxCareSymfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization5.1 Mediumsymfony/routingTuxCareSymfony: UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injection2.3 Low