pkg:Packagist/symfony/security-http

All known vulnerabilities

• HIGH8.8CVE-2018-11406Symfony CSRF Token Fixation
  >= 2.7.0, < 2.7.48
• HIGH8.1CVE-2018-11385Symfony Session Fixation Vulnerability
  >= 2.7.0, < 2.7.48
• HIGH7.6CVE-2020-5275Firewall configured with unanimous strategy was not actually unanimous in Symfony
  >= 4.4.0, < 4.4.7
• HIGH7.5symfony - security update
  >= 5.3.0, < 5.4.47
• HIGH7.5Symphony Denial of Service Via Overlong Usernames
  >= 2.3.0, < 2.3.41
• HIGH7.5Improper authentication in Symfony
  >= 2.7.0, < 2.7.51
• MEDIUM6.8Authentication granted to all firewalls instead of just one
  >= 5.3.0, < 5.3.2
• MEDIUM6.5Symfony possible session fixation vulnerability
  >= 5.4.21, < 5.4.31
• MEDIUM6.1symfony - security update
  >= 2.7.0, < 2.7.38
• MEDIUM6.1Symfony Open Redirect
  >= 2.7.38, < 2.7.50
• MEDIUM5.3symfony - security update
  >= 5.1.0, < 5.2.8
• MEDIUM5.3symfony - security update
  >= 4.1.0, < 4.2.12
• LOW3.1symfony - security update
  >= 2.4.0, < 2.6.12
• —Symfony Vulnerable to Timing Attack
  >= 2.4.0, < 2.6.12