pkg:Packagist/symfony/http-kernel

All known vulnerabilities

• HIGH8.1CVE-2019-18887symfony - security update
  >= 2.2.0, < 2.8.52
• HIGH8.0CVE-2020-15094RCE in Symfony
  >= 4.3.0, < 4.4.13
• HIGH7.5CVE-2014-5245Symfony allows direct access of ESI URLs behind a trusted proxy
  >= 2.0.0, < 2.3.19
• MEDIUM6.5CVE-2021-41267Webcache Poisoning in symfony/http-kernel
  >= 5.2.0, < 5.3.12
• MEDIUM5.9CVE-2022-24894Symfony storing cookie headers in HttpCache
  >= 2.0.0, < 4.4.50
• —CVE-2026-45075Synfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]
  >= 7.4.0, < 7.4.12
• —CVE-2015-2308Symfony Vulnerable to PHP Eval Injection
  >= 2.0.0, < 2.3.27
• —CVE-2015-4050symfony - security update
  >= 2.3.19, < 2.3.29