symfony/yaml (Packagist)
Advisories
20
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 8.1.6 or later clears every advisory below that has a fix.
Upgrade commands
composer
composer require symfony/yaml:^8.1.6Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-2v3c-qxhr-7vpv Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process |
High EPSS 0.40% |
>= 2.0.0, < 5.4.54 | 5.4.54 |
| GHSA-2v3c-qxhr-7vpv Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process |
High EPSS 0.40% |
>= 6.0.0, < 6.4.45 | 6.4.45 |
| GHSA-2v3c-qxhr-7vpv Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process |
High EPSS 0.40% |
>= 7.0.0, < 7.4.18 | 7.4.18 |
| GHSA-2v3c-qxhr-7vpv Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process |
High EPSS 0.40% |
>= 8.0.0, < 8.1.6 | 8.1.6 |
| GHSA-9frc-8383-795m Symfony's YAML Parser has a ReDoS via Catastrophic Backtracking in Parser::cleanup() Regex |
High EPSS 0.68% |
>= 8.0.0, < 8.0.12 | 8.0.12 |
| GHSA-9frc-8383-795m Symfony's YAML Parser has a ReDoS via Catastrophic Backtracking in Parser::cleanup() Regex |
High EPSS 0.68% |
< 5.4.52 | 5.4.52 |
| GHSA-9frc-8383-795m Symfony's YAML Parser has a ReDoS via Catastrophic Backtracking in Parser::cleanup() Regex |
High EPSS 0.68% |
>= 6.0.0, < 6.4.40 | 6.4.40 |
| GHSA-9frc-8383-795m Symfony's YAML Parser has a ReDoS via Catastrophic Backtracking in Parser::cleanup() Regex |
High EPSS 0.68% |
>= 7.0.0, < 7.4.12 | 7.4.12 |
| GHSA-4qpc-3hr4-r2p4 Symfony's YAML Parser Vulnerable to Exponential Memory Allocation via Recursive Collection-Alias Expansion ("Billion Laughs") |
High EPSS 0.68% |
>= 6.0.0, < 6.4.40 | 6.4.40 |
| GHSA-4qpc-3hr4-r2p4 Symfony's YAML Parser Vulnerable to Exponential Memory Allocation via Recursive Collection-Alias Expansion ("Billion Laughs") |
High EPSS 0.68% |
< 5.4.52 | 5.4.52 |
| GHSA-4qpc-3hr4-r2p4 Symfony's YAML Parser Vulnerable to Exponential Memory Allocation via Recursive Collection-Alias Expansion ("Billion Laughs") |
High EPSS 0.68% |
>= 8.0.0, < 8.0.12 | 8.0.12 |
| GHSA-4qpc-3hr4-r2p4 Symfony's YAML Parser Vulnerable to Exponential Memory Allocation via Recursive Collection-Alias Expansion ("Billion Laughs") |
High EPSS 0.68% |
>= 7.0.0, < 7.4.12 | 7.4.12 |
| GHSA-c2p3-7m5p-cv8x Symfony hardened the parser when handling untrusted input |
High EPSS 0.63% |
>= 8.0.0, < 8.0.12 | 8.0.12 |
| GHSA-c2p3-7m5p-cv8x Symfony hardened the parser when handling untrusted input |
High EPSS 0.63% |
>= 7.0.0, < 7.4.12 | 7.4.12 |
| GHSA-c2p3-7m5p-cv8x Symfony hardened the parser when handling untrusted input |
High EPSS 0.63% |
>= 6.0.0, < 6.4.40 | 6.4.40 |
| GHSA-c2p3-7m5p-cv8x Symfony hardened the parser when handling untrusted input |
High EPSS 0.63% |
< 5.4.52 | 5.4.52 |
| GHSA-2r5h-6r7v-5m7c Symphony Vulnerable to PHP Code Injection via YAML Parsing |
High EPSS 1.62% |
>= 2.0.0, < 2.0.22 | 2.0.22 |
| GHSA-7w53-hfpw-rg3g Symfony Arbitrary PHP code Execution |
High EPSS 1.62% |
>= 2.1.0, < 2.1.7 | 2.1.7 |
| GHSA-7w53-hfpw-rg3g Symfony Arbitrary PHP code Execution |
High EPSS 1.62% |
>= 2.0.0, < 2.0.22 | 2.0.22 |
| GHSA-7w53-hfpw-rg3g Symfony Arbitrary PHP code Execution |
High EPSS 1.62% |
>= 2.2.0-BETA1, < 2.2.0-BETA2 | 2.2.0-BETA2 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor