Skip to contentSymfony vulnerabilities
Newest
- sensiolabs symfonyCookie persistence in SymfonyCVE-2021-41268Fix available6.5 Medium
- sensiolabs symfonyAuthentication granted with multiple firewallsCVE-2021-32693Fix available6.8 Medium
- sensiolabs symfony, fedoraproject fedora +1 morePrevent user enumeration using Guard or the new Authenticator-based SecurityCVE-2021-21424Public exploitFix available5.3 Medium
- sensiolabs httpclient, symfony, fedoraproject fedora +2 moreRCE in SymfonyCVE-2020-15094Fix available8.0 High
- sensiolabs symfonyFirewall configured with unanimous strategy was not actually unanimous in symfony/security-httpCVE-2020-5275Fix available7.6 High
- sensiolabs symfonyExceptions displayed in non-debug configurations in SymfonyCVE-2020-5274Fix available4.6 Medium
- sensiolabs symfonyPrevent cache poisoning via a Response Content-Type headerCVE-2020-5255Fix available2.6 Low
- symfony twig, debian linux +1 moreTwig Sandbox Information DisclosureCVE-2019-9942Fix available3.7 Low
- symfony twig** DISPUTED ** Twig before 2.4.4 allows Server-Side Template Injection (SSTI) via the search...CVE-2018-13818Disputed9.8 Critical
- symfony twigTwig remote code execution in templatesCVE-2015-7809Fix available6.8 Medium
- symfony twigThe default "basic" security setting' in config.php for TWIG webmail 2.7.4 and earlier stores...CVE-2001-15377.5 High