Your dependencies cross-checked against the OSV vulnerability database.
-
Serious GHSA-pgwj-prpq-jpc2 Symfony Service IDs Allow Injection
/workdirs/scan-b03b6f96-bc9f-4ef0-acb2-4caf98c0b2c5/composer.lock
A package you depend on has a known security hole (CVE-2019-10910). Fix: Update that package to its patched version.
-
Serious GHSA-x92h-wmg2-6hp7 Invalid HTTP method overrides allow possible XSS or other attacks in Symfony
/workdirs/scan-b03b6f96-bc9f-4ef0-acb2-4caf98c0b2c5/composer.lock
A package you depend on has a known security hole (CVE-2019-10913). Fix: Update that package to its patched version.
-
Worth fixing GHSA-vvj3-c3rp-c85p PHPUnit Vulnerable to Unsafe Deserialization in PHPT Code Coverage Handling
/workdirs/scan-b03b6f96-bc9f-4ef0-acb2-4caf98c0b2c5/composer.lock
A package you depend on has a known security hole (CVE-2026-24765). Fix: Update that package to its patched version.
-
Worth fixing GHSA-hmqg-cxww-wqhq PHP_CodeSniffer gitblame report command injection via crafted filename
/workdirs/scan-b03b6f96-bc9f-4ef0-acb2-4caf98c0b2c5/composer.lock
A package you depend on has a known security hole (CVE-2026-67434). Fix: Update that package to its patched version.
-
Worth fixing GHSA-3rg7-wf37-54rm Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass
/workdirs/scan-b03b6f96-bc9f-4ef0-acb2-4caf98c0b2c5/composer.lock
A package you depend on has a known security hole (CVE-2025-64500). Fix: Update that package to its patched version.
-
Worth fixing GHSA-8wgj-6wx8-h5hq Symfony HTTP Foundation web cache poisoning
/workdirs/scan-b03b6f96-bc9f-4ef0-acb2-4caf98c0b2c5/composer.lock
A package you depend on has a known security hole (CVE-2018-14773). Fix: Update that package to its patched version.
-
Worth fixing GHSA-r2rq-3h56-fqm4 Symfony DoS
/workdirs/scan-b03b6f96-bc9f-4ef0-acb2-4caf98c0b2c5/composer.lock
A package you depend on has a known security hole (CVE-2018-11386). Fix: Update that package to its patched version.
-
Worth fixing GHSA-xhh6-956q-4q69 Argument injection in a MimeTypeGuesser in Symfony
/workdirs/scan-b03b6f96-bc9f-4ef0-acb2-4caf98c0b2c5/composer.lock
A package you depend on has a known security hole (CVE-2019-18888). Fix: Update that package to its patched version.
-
Worth fixing GHSA-h7vf-5wrv-9fhv Symfony storing cookie headers in HttpCache
/workdirs/scan-b03b6f96-bc9f-4ef0-acb2-4caf98c0b2c5/composer.lock
A package you depend on has a known security hole (CVE-2022-24894). Fix: Update that package to its patched version.
-
Worth fixing GHSA-q8hg-pf8v-cxrv Symfony Http-Kernel has non-constant time comparison in UriSigner
/workdirs/scan-b03b6f96-bc9f-4ef0-acb2-4caf98c0b2c5/composer.lock
A package you depend on has a known security hole (CVE-2019-18887). Fix: Update that package to its patched version.
-
Worth fixing GHSA-qq5c-677p-737q Symfony vulnerable to command execution hijack on Windows with Process class
/workdirs/scan-b03b6f96-bc9f-4ef0-acb2-4caf98c0b2c5/composer.lock
A package you depend on has a known security hole (CVE-2024-51736). Fix: Update that package to its patched version.
-
Worth fixing GHSA-r39x-jcww-82v6 Symfony's incorrect argument escaping under MSYS2/Git Bash can lead to destructive file operations on Windows
/workdirs/scan-b03b6f96-bc9f-4ef0-acb2-4caf98c0b2c5/composer.lock
A package you depend on has a known security hole (CVE-2026-24739). Fix: Update that package to its patched version.
-
Minor GHSA-mrqx-rp3w-jpjp Symfony vulnerable to open redirect via browser-sanitized URLs
/workdirs/scan-b03b6f96-bc9f-4ef0-acb2-4caf98c0b2c5/composer.lock
A package you depend on has a known security hole (CVE-2024-50345). Fix: Update that package to its patched version.
-
Minor GHSA-4qpc-3hr4-r2p4 Symfony's YAML Parser Vulnerable to Exponential Memory Allocation via Recursive Collection-Alias Expansion ("Billion Laughs")
/workdirs/scan-b03b6f96-bc9f-4ef0-acb2-4caf98c0b2c5/composer.lock
A package you depend on has a known security hole (CVE-2026-45304). Fix: Update that package to its patched version.
-
Minor GHSA-9frc-8383-795m Symfony's YAML Parser has a ReDoS via Catastrophic Backtracking in Parser::cleanup() Regex
/workdirs/scan-b03b6f96-bc9f-4ef0-acb2-4caf98c0b2c5/composer.lock
A package you depend on has a known security hole (CVE-2026-45305). Fix: Update that package to its patched version.
-
Minor GHSA-c2p3-7m5p-cv8x Symfony hardened the parser when handling untrusted input
/workdirs/scan-b03b6f96-bc9f-4ef0-acb2-4caf98c0b2c5/composer.lock
A package you depend on has a known security hole (CVE-2026-45133). Fix: Update that package to its patched version.