Alta
CVE-2026-45067
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 105
Restablecer filtros
Media
CVE-2026-45066
Symfony has an HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URL-Parser Differentials and <area> Misclassification
Media
CVE-2026-45064
Symfony's HtmlSanitizer URL Attributes Pass Through BiDi Override Characters → Visual href Spoofing
Media
CVE-2026-45065
Symfony has a UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injection
Alta
CVE-2026-45063
Symfony Vulnerable to Identity Spoofing via Unanchored DN Regex in X509Authenticator
Media
CVE-2026-24739
Symfony's incorrect argument escaping under MSYS2/Git Bash can lead to destructive file operations on Windows
Alta
CVE-2025-64500
Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass
Alta
CVE-2024-51996
Symfony has an Authentication Bypass via RememberMe
Alta
CVE-2024-51736
Symfony vulnerable to command execution hijack on Windows with Process class
Baja
CVE-2024-50345
Symfony vulnerable to open redirect via browser-sanitized URLs
Baja
CVE-2024-50343
Symfony has an incorrect response from Validator when input ends with `\n`
Baja
CVE-2024-50342
Symfony allows internal address and port enumeration by NoPrivateNetworkHttpClient
Baja
CVE-2024-50341
Symfony's `Security::login` does not take into account custom `user_checker`
Media
CVE-2024-50340
Symfony allows changing the environment through a query
Alta
ghsa-4vf2-qfg3-7598
symfony/validator XML Entity Expansion vulnerability
Alta
ghsa-f75p-x5vm-83qp
symfony/translation XML Entity Expansion vulnerability
Alta
CVE-2014-6072
Symfony Cross-Site Request Forgery vulnerability in the Web Profiler
Media
ghsa-hx53-jchx-cr52
Symfony2 improper IP based access control
Alta
ghsa-q2gc-gg3x-7942
Symfony XML Entity Expansion security vulnerability
Crítica
ghsa-mmcv-fvq8-r9x3
Symfony XML decoding attack vector through external entities
Media
ghsa-7mx2-7q8p-pgmw
Symfony may allow a user to switch to using another user's identity
Alta
CVE-2014-5245
Symfony allows direct access of ESI URLs behind a trusted proxy
Media
CVE-2015-2309
Symfony has unsafe methods in the Request class
Media
CVE-2014-6061
Symfony has a security issue when parsing the Authorization header
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.