pkg:Packagist/symfony/yaml

5 total CVEs

✅ Check your installed version

All known vulnerabilities

  • —CVE-2026-45305Symfony's YAML Parser has a ReDoS via Catastrophic Backtracking in Parser::cleanup() Regex
    from 0, < 5.4.52
  • —CVE-2026-45304Symfony's YAML Parser Vulnerable to Exponential Memory Allocation via Recursive Collection-Alias Expansion ("Billion Laughs")
    from 0, < 5.4.52
  • —CVE-2026-45133Symfony hardened the parser when handling untrusted input
    from 0, < 5.4.52
  • —CVE-2013-1348Symphony Vulnerable to PHP Code Injection via YAML Parsing
    >= 2.0.0, < 2.0.22
  • —CVE-2013-1397Symfony Arbitrary PHP code Execution
    >= 2.0.0, < 2.0.22