Known vulnerabilities in Symfony - page 2

Vendor: SensioLabs
Software: Symfony
Software CPE: cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*
Total vulnerabilities: 88
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Symfony Symfony is affected by 88 known vulnerabilities: 14 high, 51 medium, 23 low Critical High Medium Low

Vulnerabilities (88)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132074 - Insufficient Verification of Data Authenticity
CVE-2026-45069
CWE-345 Medium
No
No
6.4.40, 7.4.12, 8.0.12 21.05.2026 SB2026052131
SB2026060316
#VU132073 - Authentication Bypass by Spoofing
CVE-2026-45074
CWE-290 Low
No
No
7.4.12, 8.0.12 21.05.2026 SB2026052131
#VU132072 - Argument Injection or Modification
CVE-2026-45068
CWE-88 Low
No
No
5.4.52, 6.4.40, 7.4.12, 8.0.12 21.05.2026 SB2026052131
SB2026060202
SB2026060316
#VU132071 - Authentication Bypass by Spoofing
CVE-2026-45063
CWE-290 Low
No
No
5.4.52, 6.4.40, 7.4.12, 8.0.12 21.05.2026 SB2026052131
SB2026060202
SB2026060316
#VU132070 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-45067
CWE-93 High
No
No
5.4.52, 6.4.40, 7.4.12, 8.0.12 21.05.2026 SB2026052131
SB2026060202
SB2026060316
#VU132069 - Interpretation Conflict
CVE-2026-45066
CWE-436 Medium
No
No
6.4.40, 7.4.12, 8.0.12 21.05.2026 SB2026052131
SB2026060316
#VU132068 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45072
CWE-79 Low
No
No
6.4.40, 7.4.12, 8.0.12 21.05.2026 SB2026052131
SB2026060316
#VU132067 - Incorrect Authorization
CVE-2026-45075
CWE-863 Medium
No
No
7.4.12, 8.0.12 21.05.2026 SB2026052131
#VU132066 - Incorrect Regular Expression
CVE-2026-45065
CWE-185 Low
No
No
5.4.52, 6.4.40, 7.4.12, 8.0.12 21.05.2026 SB2026052131
SB2026060202
SB2026060316
#VU122102 - Argument Injection or Modification
CVE-2026-24739
CWE-88 Medium
No
No
5.4.51, 6.4.33, 7.3.11, 7.4.5, 8.0.5 28.01.2026 SB2026012851
#VU118507 - Improper input validation
CVE-2025-64500
CWE-20 Medium
No
No
5.4.50, 6.4.29, 7.3.7 13.11.2025 SB2025111347
#VU100537 - Improper Authentication
CVE-2024-51996
CWE-287 High
No
No
5.4.47, 6.4.15, 7.1.8 15.11.2024 SB20241115100
SB2024111602
SB2025021846
#VU99967 - Improper input validation
CVE-2024-50340
CWE-20 Medium
Available
No
5.4.46, 6.4.14, 7.1.7 06.11.2024 SB2024110649
SB2024111157
SB2025021846
and 2 more
#VU99966 - Server-Side Request Forgery (SSRF)
CVE-2024-50342
CWE-918 Medium
No
No
5.4.46, 6.4.14, 7.1.7 06.11.2024 SB2024110649
SB2024110732
SB2024110733
and 3 more
#VU99965 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-50345
CWE-601 Low
No
No
5.4.46, 6.4.14, 7.1.7 06.11.2024 SB2024110649
SB2024111157
SB2025021846
and 4 more
#VU99964 - Untrusted Search Path
CVE-2024-51736
CWE-426 Low
No
No
5.4.46, 6.4.14, 7.1.7 06.11.2024 SB2024110649
#VU99963 - Improper input validation
CVE-2024-50343
CWE-20 Low
No
No
5.4.43, 6.4.11, 7.1.4 06.11.2024 SB2024110647
SB2024111157
SB2025021846
#VU99962 - Unimplemented or Unsupported Feature in UI
CVE-2024-50341
CWE-447 Low
No
No
6.4.10, 7.0.10, 7.1.3 06.11.2024 SB2024110646
SB2025021846
#VU82998 - Session Fixation
CVE-2023-46733
CWE-384 Medium
No
No
5.4.31, 6.3.8 13.11.2023 SB2023111303
#VU82995 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-46735
CWE-79 Low
No
No
6.3.8 13.11.2023 SB2023111303


Showing elements 21 - 40 out of 88