Known vulnerabilities in Symfony - page 5

Vendor: SensioLabs
Software: Symfony
Software CPE: cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*
Total vulnerabilities: 91
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Symfony Symfony is affected by 91 known vulnerabilities: 14 high, 54 medium, 23 low Critical High Medium Low

Vulnerabilities (91)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU155823 - Inefficient Regular Expression Complexity
CVE-2026-108082
CWE-1333 Medium
No
No
6.4.46, 7.4.19, 8.1.7 15.10.2026 SB2026101518
#VU155822 - Uncontrolled Recursion
CVE-2026-109413
CWE-674 Medium
No
No
6.4.45, 7.4.18, 8.1.6 15.10.2026 SB2026101517
#VU155821 - Uncontrolled Recursion
CVE-2026-109449
CWE-674 Medium
No
No
6.4.48, 7.4.21, 8.1.9 15.10.2026 SB2026101516
#VU18300 - Improper input validation
CVE-2019-10913
CWE-20 Medium
No
No
2.7.51, 2.8.50, 3.4.26, 4.1.12, 4.2.7 18.04.2019 SB2019041802
SB2019051003
SB2019041827
and 7 more
#VU18299 - Deserialization of Untrusted Data
CVE-2019-10912
CWE-502 Medium
No
No
2.8.50, 3.4.26, 4.1.12, 4.2.7 18.04.2019 SB2019041802
SB2019051003
SB2019062507
and 8 more
#VU18298 - Improper Authentication
CVE-2019-10911
CWE-287 Medium
No
No
2.7.51, 2.8.50, 3.4.26, 4.1.12, 4.2.7 17.04.2019 SB2019041705
SB2019041802
SB2019051003
and 11 more
#VU18297 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-10910
CWE-94 High
No
No
2.7.51, 2.8.50, 3.4.26, 4.1.12, 4.2.7 17.04.2019 SB2019041705
SB2019041802
SB2019051003
and 11 more
#VU18296 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10909
CWE-79 Medium
No
No
2.7.51, 2.8.50, 3.4.26, 4.1.12, 4.2.7 17.04.2019 SB2019041705
SB2019041802
SB2019051003
and 11 more
#VU16615 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-19790
CWE-601 Low
No
No
2.7.50, 2.8.49, 3.4.20, 4.0.15, 4.1.9, 4.2.1 19.12.2018 SB2018121906
SB2019051003
SB2018120740
and 5 more
#VU16614 - Improper input validation
CVE-2018-19789
CWE-20 High
No
No
2.7.50, 2.8.49, 3.4.20, 4.0.15, 4.1.9, 4.2.1 19.12.2018 SB2018121906
SB2019051003
SB2018120740
and 5 more
#VU14165 - Exposed Dangerous Method or Function
CVE-2018-14773
CWE-749 Low
No
No
2.7.49, 2.8.44, 3.3.18, 3.4.14, 4.0.14, 4.1.3 01.08.2018 SB2018080118
SB2018080119
SB2019051003


Showing elements 81 - 100 out of 91