Your dependencies cross-checked against the OSV vulnerability database.
-
Serious GHSA-4qpj-gxxg-jqg4 Swiftmailer Sendmail transport arbitrary shell execution
/workdirs/scan-ae240f9f-b0ea-4c16-98d4-9aac95f73a71/composer.lock
A package you depend on has a known security hole. Fix: Update that package to its patched version.
-
Serious GHSA-pr44-4jfr-286m Swift Mailer mail transport Command Injection
/workdirs/scan-ae240f9f-b0ea-4c16-98d4-9aac95f73a71/composer.lock
A package you depend on has a known security hole (CVE-2016-10074). Fix: Update that package to its patched version.
-
Worth fixing GHSA-pw5c-xqf2-6xc2 Doctrine Security Misconfiguration Vulnerability
/workdirs/scan-ae240f9f-b0ea-4c16-98d4-9aac95f73a71/composer.lock
A package you depend on has a known security hole (CVE-2015-5723). Fix: Update that package to its patched version.
-
Worth fixing GHSA-pw5c-xqf2-6xc2 Doctrine Security Misconfiguration Vulnerability
/workdirs/scan-ae240f9f-b0ea-4c16-98d4-9aac95f73a71/composer.lock
A package you depend on has a known security hole (CVE-2015-5723). Fix: Update that package to its patched version.
-
Worth fixing GHSA-pw5c-xqf2-6xc2 Doctrine Security Misconfiguration Vulnerability
/workdirs/scan-ae240f9f-b0ea-4c16-98d4-9aac95f73a71/composer.lock
A package you depend on has a known security hole (CVE-2015-5723). Fix: Update that package to its patched version.
-
Worth fixing GHSA-wjv8-pxr6-5f4r Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency
/workdirs/scan-ae240f9f-b0ea-4c16-98d4-9aac95f73a71/composer.lock
A package you depend on has a known security hole (CVE-2024-28859). Fix: Update that package to its patched version.
-
Worth fixing GHSA-wfv7-5x33-v22h Code injection in the way Symfony implements translation caching in FrameworkBundle
/workdirs/scan-ae240f9f-b0ea-4c16-98d4-9aac95f73a71/composer.lock
A package you depend on has a known security hole (CVE-2014-4931). Fix: Update that package to its patched version.
-
Worth fixing GHSA-3rg7-wf37-54rm Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass
/workdirs/scan-ae240f9f-b0ea-4c16-98d4-9aac95f73a71/composer.lock
A package you depend on has a known security hole (CVE-2025-64500). Fix: Update that package to its patched version.
-
Worth fixing GHSA-h7v2-2qwg-h829 Symfony has a security issue when parsing the Authorization header
/workdirs/scan-ae240f9f-b0ea-4c16-98d4-9aac95f73a71/composer.lock
A package you depend on has a known security hole (CVE-2014-6061). Fix: Update that package to its patched version.
-
Worth fixing GHSA-p684-f7fh-jv2j Symfony has unsafe methods in the Request class
/workdirs/scan-ae240f9f-b0ea-4c16-98d4-9aac95f73a71/composer.lock
A package you depend on has a known security hole (CVE-2015-2309). Fix: Update that package to its patched version.
-
Worth fixing GHSA-v77v-x634-9m56 Symfony vulnerable to denial of service via a malicious HTTP Host header
/workdirs/scan-ae240f9f-b0ea-4c16-98d4-9aac95f73a71/composer.lock
A package you depend on has a known security hole (CVE-2014-5244). Fix: Update that package to its patched version.
-
Worth fixing GHSA-xhh6-956q-4q69 Argument injection in a MimeTypeGuesser in Symfony
/workdirs/scan-ae240f9f-b0ea-4c16-98d4-9aac95f73a71/composer.lock
A package you depend on has a known security hole (CVE-2019-18888). Fix: Update that package to its patched version.
-
Worth fixing GHSA-h7vf-5wrv-9fhv Symfony storing cookie headers in HttpCache
/workdirs/scan-ae240f9f-b0ea-4c16-98d4-9aac95f73a71/composer.lock
A package you depend on has a known security hole (CVE-2022-24894). Fix: Update that package to its patched version.
-
Worth fixing GHSA-wvjv-p5rr-mmqm Symfony allows direct access of ESI URLs behind a trusted proxy
/workdirs/scan-ae240f9f-b0ea-4c16-98d4-9aac95f73a71/composer.lock
A package you depend on has a known security hole (CVE-2014-5245). Fix: Update that package to its patched version.
-
Worth fixing GHSA-h5x3-xfc9-m39h Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization
/workdirs/scan-ae240f9f-b0ea-4c16-98d4-9aac95f73a71/composer.lock
A package you depend on has a known security hole (CVE-2026-48784). Fix: Update that package to its patched version.
-
Minor GHSA-mrqx-rp3w-jpjp Symfony vulnerable to open redirect via browser-sanitized URLs
/workdirs/scan-ae240f9f-b0ea-4c16-98d4-9aac95f73a71/composer.lock
A package you depend on has a known security hole (CVE-2024-50345). Fix: Update that package to its patched version.
-
FYI GHSA-5c58-w9xc-qcj9 Symfony Vulnerable to PHP Eval Injection
/workdirs/scan-ae240f9f-b0ea-4c16-98d4-9aac95f73a71/composer.lock
A package you depend on has a known security hole (CVE-2015-2308). Fix: Update that package to its patched version.
-
FYI GHSA-72xp-p242-47p9 Symfony has a UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injection
/workdirs/scan-ae240f9f-b0ea-4c16-98d4-9aac95f73a71/composer.lock
A package you depend on has a known security hole (CVE-2026-45065). Fix: Update that package to its patched version.