Medium
CVE-2026-48736
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 14
Reset filters
High
CVE-2025-64500
Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass
Low
CVE-2024-50345
Symfony vulnerable to open redirect via browser-sanitized URLs
Medium
CVE-2015-2309
Symfony has unsafe methods in the Request class
Medium
CVE-2014-6061
Symfony has a security issue when parsing the Authorization header
High
CVE-2014-5244
Symfony vulnerable to denial of service via a malicious HTTP Host header
Medium
ghsa-vfm6-r2gc-pwww
Symfony2 security issue when the trust proxy mode is enabled
Medium
CVE-2012-6431
Symfony Allows URI Restrictions Bypass Via Double-Encoded String
Medium
CVE-2018-11386
Symfony DoS
Medium
CVE-2018-14773
Symfony HTTP Foundation web cache poisoning
Medium
CVE-2013-4752
Symfony Host Header Injection vulnerability in the HttpFoundation component
Low
CVE-2020-5255
Prevent cache poisoning via a Response Content-Type header in Symfony
Critical
CVE-2019-10913
Invalid HTTP method overrides allow possible XSS or other attacks in Symfony
High
CVE-2019-18888
Argument injection in a MimeTypeGuesser in Symfony
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.