Skip to content
OpenAdvisories
Medium DLA-3664-1 1 CVE

symfony - security update

Published Nov 24, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 symfony 3.4.22+dfsg-2+deb10u3

Vulnerabilities 1

  • Medium 6.1
    CVE-2023-46734

    Symfony potential Cross-site Scripting vulnerabilities in CodeExtension filters

    Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting in versions 2.0.0, 5.0.0, and 6.0.0 and prior to versions 4.4.51, 5.4.31, and 6.3.8, some Twig filters in CodeExtension use `is_safe=html` but don't act…

    symfony symfony symfony/symfony symfony Debian Ubuntu Packagist