symfony/http-foundation vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-48736Mediumsymfony/http-client: Symfony: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms (6to4, NAT64, Teredo, IPv4-compatible): SSRF Bypass in…CVE-2025-64500Highsymfony/http-foundation: Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass CVE-2024-50345Lowsymfony/http-foundation: Symfony vulnerable to open redirect via browser-sanitized URLs CVE-2015-2309Mediumsymfony/http-foundation: Symfony has unsafe methods in the Request class CVE-2014-6061Mediumsymfony/http-foundation: Symfony has a security issue when parsing the Authorization header CVE-2014-5244Highsymfony/http-foundation: Symfony vulnerable to denial of service via a malicious HTTP Host header GHSA-VFM6-R2GC-PWWWMediumsymfony/http-foundation: Symfony2 security issue when the trust proxy mode is enabled CVE-2012-6431Mediumsymfony/http-foundation: Symfony Allows URI Restrictions Bypass Via Double-Encoded String CVE-2018-11386Mediumsymfony/symfony: Symfony DoS CVE-2018-14773Mediumsymfony/http-foundation: Symfony HTTP Foundation web cache poisoning CVE-2013-4752Mediumsymfony/symfony: Symfony Host Header Injection vulnerability in the HttpFoundation component CVE-2020-5255Lowsymfony/http-foundation: Prevent cache poisoning via a Response Content-Type header in Symfony CVE-2019-10913Criticalsymfony/http-foundation: Invalid HTTP method overrides allow possible XSS or other attacks in Symfony CVE-2019-18888Highsymfony/http-foundation: Argument injection in a MimeTypeGuesser in Symfony

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo