symfony/routing (Packagist)
Advisories
9
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 8.0.13 or later clears every advisory below that has a fix.
Upgrade commands
composer
composer require symfony/routing:^8.0.13Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-h5x3-xfc9-m39h Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization |
Medium EPSS 0.35% |
>= 8.0.0, < 8.0.13 | 8.0.13 |
| GHSA-h5x3-xfc9-m39h Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization |
Medium EPSS 0.35% |
< 5.4.53 | 5.4.53 |
| GHSA-h5x3-xfc9-m39h Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization |
Medium EPSS 0.35% |
>= 6.0.0, < 6.4.41 | 6.4.41 |
| GHSA-h5x3-xfc9-m39h Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization |
Medium EPSS 0.35% |
>= 7.0.0, < 7.4.13 | 7.4.13 |
| GHSA-72xp-p242-47p9 Symfony has a UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injection |
Low EPSS 0.35% |
< 5.4.52 | 5.4.52 |
| GHSA-72xp-p242-47p9 Symfony has a UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injection |
Low EPSS 0.35% |
>= 6.0.0, < 6.4.40 | 6.4.40 |
| GHSA-72xp-p242-47p9 Symfony has a UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injection |
Low EPSS 0.35% |
>= 7.0.0, < 7.4.12 | 7.4.12 |
| GHSA-72xp-p242-47p9 Symfony has a UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injection |
Low EPSS 0.35% |
>= 8.0.0, < 8.0.12 | 8.0.12 |
| GHSA-83c3-qx27-2rwr Symfony Allows URI Restrictions Bypass Via Double-Encoded String |
Medium EPSS 1.88% |
>= 2.0.0, < 2.0.19 | 2.0.19 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor