symfony/http-kernel (Packagist)
Advisories
24
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 8.0.12 or later clears every advisory below that has a fix.
Upgrade commands
composer
composer require symfony/http-kernel:^8.0.12Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-6439-2f28-8p8q Symfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid] |
High EPSS 0.43% |
>= 7.4.0, < 7.4.12 | 7.4.12 |
| GHSA-6439-2f28-8p8q Symfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid] |
High EPSS 0.43% |
>= 8.0.0, < 8.0.12 | 8.0.12 |
| GHSA-wvjv-p5rr-mmqm Symfony allows direct access of ESI URLs behind a trusted proxy |
High | >= 2.5.0, < 2.5.4 | 2.5.4 |
| GHSA-wvjv-p5rr-mmqm Symfony allows direct access of ESI URLs behind a trusted proxy |
High | >= 2.0.0, < 2.3.19 | 2.3.19 |
| GHSA-wvjv-p5rr-mmqm Symfony allows direct access of ESI URLs behind a trusted proxy |
High | >= 2.4.0, < 2.4.9 | 2.4.9 |
| GHSA-h7vf-5wrv-9fhv Symfony storing cookie headers in HttpCache |
Medium EPSS 4.00% |
>= 5.0.0, < 5.4.20 | 5.4.20 |
| GHSA-h7vf-5wrv-9fhv Symfony storing cookie headers in HttpCache |
Medium EPSS 4.00% |
>= 6.0.0, < 6.0.20 | 6.0.20 |
| GHSA-h7vf-5wrv-9fhv Symfony storing cookie headers in HttpCache |
Medium EPSS 4.00% |
>= 6.1.0, < 6.1.12 | 6.1.12 |
| GHSA-h7vf-5wrv-9fhv Symfony storing cookie headers in HttpCache |
Medium EPSS 4.00% |
>= 6.2.0, < 6.2.6 | 6.2.6 |
| GHSA-h7vf-5wrv-9fhv Symfony storing cookie headers in HttpCache |
Medium EPSS 4.00% |
>= 2.0.0, < 4.4.50 | 4.4.50 |
| GHSA-5c58-w9xc-qcj9 Symfony Vulnerable to PHP Eval Injection |
Medium EPSS 1.34% |
>= 2.4.0, < 2.5.11 | 2.5.11 |
| GHSA-5c58-w9xc-qcj9 Symfony Vulnerable to PHP Eval Injection |
Medium EPSS 1.34% |
>= 2.0.0, < 2.3.27 | 2.3.27 |
| GHSA-5c58-w9xc-qcj9 Symfony Vulnerable to PHP Eval Injection |
Medium EPSS 1.34% |
>= 2.6.0, < 2.6.6 | 2.6.6 |
| GHSA-qmqw-mpqp-mr54 Symfony Incorrect Access Control |
Medium EPSS 8.21% |
>= 2.4.9, <= 2.4.10 | No fix yet |
| GHSA-qmqw-mpqp-mr54 Symfony Incorrect Access Control |
Medium EPSS 8.21% |
>= 2.5.4, < 2.5.12 | 2.5.12 |
| GHSA-qmqw-mpqp-mr54 Symfony Incorrect Access Control |
Medium EPSS 8.21% |
>= 2.3.19, < 2.3.29 | 2.3.29 |
| GHSA-qmqw-mpqp-mr54 Symfony Incorrect Access Control |
Medium EPSS 8.21% |
>= 2.6.0, < 2.6.8 | 2.6.8 |
| GHSA-q8hg-pf8v-cxrv Symfony Http-Kernel has non-constant time comparison in UriSigner |
High EPSS 1.34% |
>= 3.0.0, < 3.4.35 | 3.4.35 |
| GHSA-q8hg-pf8v-cxrv Symfony Http-Kernel has non-constant time comparison in UriSigner |
High EPSS 1.34% |
>= 2.2.0, < 2.8.52 | 2.8.52 |
| GHSA-q8hg-pf8v-cxrv Symfony Http-Kernel has non-constant time comparison in UriSigner |
High EPSS 1.34% |
>= 4.0.0, < 4.2.12 | 4.2.12 |
| GHSA-q8hg-pf8v-cxrv Symfony Http-Kernel has non-constant time comparison in UriSigner |
High EPSS 1.34% |
>= 4.3.0, < 4.3.8 | 4.3.8 |
| GHSA-q3j3-w37x-hq2q Webcache Poisoning in symfony/http-kernel |
Medium EPSS 1.28% |
>= 5.2.0, < 5.3.12 | 5.3.12 |
| GHSA-754h-5r27-7x3r RCE in Symfony |
High EPSS 3.04% |
>= 4.3.0, < 4.4.13 | 4.4.13 |
| GHSA-754h-5r27-7x3r RCE in Symfony |
High EPSS 3.04% |
>= 5.0.0, < 5.1.5 | 5.1.5 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor