| Bug | jessie | stretch | buster | bullseye | bookworm | trixie | sid | Description |
|---|
| CVE-2024-51996 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | fixed | fixed | Symphony process is a module for the Symphony PHP framework which exec ... |
| CVE-2024-50345 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | fixed | fixed | symfony/http-foundation is a module for the Symphony PHP framework whi ... |
| CVE-2024-50343 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | fixed | fixed | symfony/validator is a module for the Symphony PHP framework which pro ... |
| CVE-2024-50342 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | fixed | fixed | symfony/http-client is a module for the Symphony PHP framework which p ... |
| CVE-2024-50341 | vulnerable | vulnerable | vulnerable | fixed | fixed | fixed | fixed | symfony/security-bundle is a module for the Symphony PHP framework whi ... |
| CVE-2024-50340 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | fixed | fixed | symfony/runtime is a module for the Symphony PHP framework which enabl ... |
| CVE-2024-36611 | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | In Symfony v7.07, a security vulnerability was identified in the FormL ... |
| CVE-2023-46734 | vulnerable | fixed | fixed | fixed | fixed | fixed | fixed | Symfony is a PHP framework for web and console applications and a set ... |
| CVE-2022-24895 | vulnerable | fixed | fixed | fixed | fixed | fixed | fixed | Symfony is a PHP framework for web and console applications and a set ... |
| CVE-2022-24894 | vulnerable | fixed | fixed | fixed | fixed | fixed | fixed | Symfony is a PHP framework for web and console applications and a set ... |
| CVE-2021-21424 | vulnerable (no DSA, postponed) | fixed | fixed | fixed | fixed | fixed | fixed | Symfony is a PHP framework for web and console applications and a set ... |
| Bug | Description |
|---|
| CVE-2024-51736 | Symphony process is a module for the Symphony PHP framework which exec ... |
| CVE-2023-46735 | Symfony is a PHP framework for web and console applications and a set ... |
| CVE-2023-46733 | Symfony is a PHP framework for web and console applications and a set ... |
| CVE-2022-23601 | Symfony is a PHP framework for web and console applications and a set ... |
| CVE-2021-41270 | Symfony/Serializer handles serializing and deserializing data structur ... |
| CVE-2021-41268 | Symfony/SecurityBundle is the security system for Symfony, a PHP frame ... |
| CVE-2021-41267 | Symfony/Http-Kernel is the HTTP kernel component for Symfony, a PHP fr ... |
| CVE-2021-32693 | Symfony is a PHP framework for web and console applications and a set ... |
| CVE-2020-15094 | In Symfony before versions 4.4.13 and 5.1.5, the CachingHttpClient cla ... |
| CVE-2020-5275 | In symfony/security-http before versions 4.4.7 and 5.0.7, when a `Fire ... |
| CVE-2020-5274 | In Symfony before versions 5.0.5 and 4.4.5, some properties of the Exc ... |
| CVE-2020-5255 | In Symfony before versions 4.4.7 and 5.0.7, when a `Response` does not ... |
| CVE-2019-18889 | An issue was discovered in Symfony 3.4.0 through 3.4.34, 4.2.0 through ... |
| CVE-2019-18888 | An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through ... |
| CVE-2019-18887 | An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through ... |
| CVE-2019-18886 | An issue was discovered in Symfony 4.2.0 to 4.2.11 and 4.3.0 to 4.3.7. ... |
| CVE-2019-11325 | An issue was discovered in Symfony before 4.2.12 and 4.3.x before 4.3. ... |
| CVE-2019-10913 | In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x ... |
| CVE-2019-10912 | In Symfony before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4. ... |
| CVE-2019-10911 | In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x ... |
| CVE-2019-10910 | In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x ... |
| CVE-2019-10909 | In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x ... |
| CVE-2018-19790 | An open redirect was discovered in Symfony 2.7.x before 2.7.50, 2.8.x ... |
| CVE-2018-19789 | An issue was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2 ... |
| CVE-2018-14774 | An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, ... |
| CVE-2018-14773 | An issue was discovered in Http Foundation in Symfony 2.7.0 through 2. ... |
| CVE-2018-11408 | The security handlers in the Security component in Symfony in 2.7.x be ... |
| CVE-2018-11407 | An issue was discovered in the Ldap component in Symfony 2.8.x before ... |
| CVE-2018-11406 | An issue was discovered in the Security component in Symfony 2.7.x bef ... |
| CVE-2018-11386 | An issue was discovered in the HttpFoundation component in Symfony 2.7 ... |
| CVE-2018-11385 | An issue was discovered in the Security component in Symfony 2.7.x bef ... |
| CVE-2017-16790 | An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3. ... |
| CVE-2017-16654 | An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3. ... |
| CVE-2017-16653 | An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3. ... |
| CVE-2017-16652 | An issue was discovered in Symfony 2.7.x before 2.7.38, 2.8.x before 2 ... |
| CVE-2017-11365 | Certain Symfony products are affected by: Incorrect Access Control. Th ... |
| CVE-2016-4423 | The attemptAuthentication function in Component/Security/Http/Firewall ... |
| CVE-2016-2403 | Symfony before 2.8.6 and 3.x before 3.0.6 allows remote attackers to b ... |
| CVE-2016-1902 | The nextBytes function in the SecureRandom class in Symfony before 2.3 ... |
| CVE-2015-8125 | Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7 ... |
| CVE-2015-8124 | Session fixation vulnerability in the "Remember Me" login feature in S ... |
| CVE-2015-4050 | FragmentListener in the HttpKernel component in Symfony 2.3.19 through ... |
| CVE-2015-2309 | Unsafe methods in the Request class |
| CVE-2015-2308 | Eval injection vulnerability in the HttpCache class in HttpKernel in S ... |
| CVE-2013-5958 | The Security component in Symfony 2.0.x before 2.0.25, 2.1.x before 2. ... |
| CVE-2008-7220 | Unspecified vulnerability in Prototype JavaScript framework (prototype ... |
| CVE-2007-2383 | The Prototype (prototypejs) framework before 1.5.1 RC3 exchanges data ... |