symfony Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by symfony

JSON RSS CSV 🔔 Create Alert Trigger

14 July 2026

Authentication Bypass Vulnerability in Symfony Framework
CVE-2026-48489
SymfonySymfony8.7HIGH
SendmailTransport Vulnerability in Symfony PHP Framework
CVE-2026-45068
SymfonySymfony8.7HIGH
XML Entity Expansion Vulnerability in Symfony PHP Framework
CVE-2026-45071
SymfonySymfony8.7HIGH
PHP Framework Vulnerability in Symfony Affecting Multiple Versions
CVE-2026-45305
SymfonySymfony8.7HIGH
YAML Parsing Vulnerability in Symfony Framework Exposes Memory Resources
CVE-2026-45304
SymfonySymfony8.7HIGH
Vulnerability in Symfony PHP Framework for Web and Console Applications
CVE-2026-45069
SymfonySymfony8.8HIGH
Denial of Service Vulnerability in Symfony PHP Framework
CVE-2026-45133
SymfonySymfony8.2HIGH
Method-Specific Attribute Misconfiguration in Symfony PHP Framework
CVE-2026-45075
SymfonySymfony8.3HIGH
Vulnerability in Symfony PHP Framework Affects Multiple Versions
CVE-2026-47767
SymfonySymfony8.3HIGH
X509Authenticator Vulnerability in Symfony PHP Framework Affecting Multiple Versions
CVE-2026-45063
SymfonySymfony9.1CRITICAL
Denial of Service Vulnerability in Symfony PHP Framework
CVE-2026-45756
SymfonySymfony8.2HIGH
PHP Framework Vulnerability in Symfony Affects Authentication Security
CVE-2026-45074
SymfonySymfony7.6HIGH
PHP Framework Vulnerability in Symfony Affecting Server Log Listener
CVE-2026-45077
SymfonySymfony8.3HIGH

8 July 2026

Path Traversal Vulnerability in Symfony UX JavaScript Ecosystem
CVE-2026-55878
SymfonyUx7.8HIGH

12 November 2025

Improper URL Path Interpretation Vulnerability in Symfony PHP Framework
CVE-2025-64500
SymfonySymfony7.3HIGH

29 November 2024

Security Vulnerability in FormLoginAuthenticator Could Lead to Improper Authentication Logic Handling or Denial of Service
CVE-2024-36611
SymfonySymfony7.5HIGH

3 February 2023

Symfony storing cookie headers in HttpCache
CVE-2022-24894
SymfonySymfony8.8HIGH

1 February 2022

CSRF token missing in Symfony
CVE-2022-23601
SymfonySymfony8.1HIGH

2 September 2020

RCE in Symfony
CVE-2020-15094
SymfonySymfony8HIGH

30 March 2020

Firewall configured with unanimous strategy was not actually unanimous in symfony/security-http
CVE-2020-5275
SymfonySymfony7.6HIGH

10 July 2018

Server-Side Template Injection Vulnerability in Twig by SensioLabs
CVE-2018-13818
SymfonyTwig👾🟡9.8CRITICAL