Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: symfony Clear
ID Title
CVE-2026-45064 Vulnerability in symfony/html-sanitizer (CVE-2026-45064)
vulnerability in symfony/html-sanitizer (CVE-2026-45064). Risk of unauthorized operations or information disclosure. Exploitable via ``HtmlSanitizer``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-45065 Vulnerability in symfony/routing (CVE-2026-45065)
vulnerability in symfony/routing (CVE-2026-45065). Risk of unauthorized operations or information disclosure. Exploitable via ``UrlGenerator``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-45063 Vulnerability in symfony/security-http (CVE-2026-45063)
vulnerability in symfony/security-http (CVE-2026-45063). Confidential information can be exposed externally. Exploitable via ``X509Authenticator``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-46640 Code Injection in twig/twig (CVE-2026-46640)
code injection in twig/twig (CVE-2026-46640). Successful exploitation can lead to full system takeover. Exploitable via ``_self``. Mitigation: upgrade to `3.26.0` or later.
CVE-2026-46639 Vulnerability in twig/twig (CVE-2026-46639)
vulnerability in twig/twig (CVE-2026-46639). Confidential information can be exposed externally. Exploitable via ``false``. Mitigation: upgrade to `3.26.0` or later.
CVE-2026-46638 Vulnerability in twig/twig (CVE-2026-46638)
vulnerability in twig/twig (CVE-2026-46638). Confidential information can be exposed externally. Exploitable via ``Environment``. Mitigation: upgrade to `3.26.0` or later.
CVE-2026-46637 Vulnerability in twig/markdown-extra (CVE-2026-46637)
vulnerability in twig/markdown-extra (CVE-2026-46637). Risk of unauthorized operations or information disclosure. Exploitable via ``html``. Mitigation: upgrade to `3.26.0` or later.
CVE-2026-46635 Authorization Flaw in twig/twig (CVE-2026-46635)
vulnerability in twig/twig (CVE-2026-46635). Risk of unauthorized operations or information disclosure. Exploitable via ``column``. Mitigation: upgrade to `3.26.0` or later.
CVE-2026-46634 Vulnerability in twig/twig (CVE-2026-46634)
vulnerability in twig/twig (CVE-2026-46634). Successful exploitation can lead to full system takeover. Exploitable via ``SourcePolicyInterface``. Mitigation: upgrade to `3.26.0` or later.
CVE-2026-46633 Code Injection in twig/twig (CVE-2026-46633)
code injection in twig/twig (CVE-2026-46633). Successful exploitation can lead to full system takeover. Exploitable via ``SecurityPolicy``. Mitigation: upgrade to `3.26.0` or later.
CVE-2026-46629 Vulnerability in twig/intl-extra (CVE-2026-46629)
vulnerability in twig/intl-extra (CVE-2026-46629). Risk of unauthorized operations or information disclosure. Exploitable via ``IntlExtension``. Mitigation: upgrade to `3.26.0` or later.
CVE-2026-46628 Vulnerability in twig/twig (CVE-2026-46628)
vulnerability in twig/twig (CVE-2026-46628). Risk of unauthorized operations or information disclosure. Exploitable via ``spaceless``. Mitigation: upgrade to `3.26.0` or later.
CVE-2026-24425 Vulnerability in twig/twig (CVE-2026-24425)
vulnerability in twig/twig (CVE-2026-24425). Successful exploitation can lead to full system takeover. Exploitable via ``SourcePolicyInterface``. Mitigation: upgrade to `3.26.0` or later.
CVE-2026-45701 Vulnerability in sulu/sulu (CVE-2026-45701)
vulnerability in sulu/sulu (CVE-2026-45701). Risk of unauthorized operations or information disclosure. Exploitable via ``User.php``. Mitigation: upgrade to `2.6.23` or later.
CVE-2026-41498 Vulnerability in kimai/kimai (CVE-2026-41498)
vulnerability in kimai/kimai (CVE-2026-41498). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.54.0` or later.
CVE-2026-33715 Vulnerability in symfony (CVE-2026-33715)
vulnerability in symfony (CVE-2026-33715). Risk of unauthorized operations or information disclosure.
CVE-2026-34372 Vulnerability in symfony (CVE-2026-34372)
vulnerability in symfony (CVE-2026-34372). Risk of unauthorized operations or information disclosure.
CVE-2023-46734 Cross-Site Scripting (XSS) in symfony (CVE-2023-46734)
cross-site scripting in symfony (CVE-2023-46734). Risk of unauthorized operations or information disclosure.
CVE-2016-2403 Authentication Bypass in symfony (CVE-2016-2403)
authentication bypass in symfony (CVE-2016-2403). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →