Skip to content
OpenAdvisories
Low DLA-4200-1 2 CVEs

symfony - security update

Published May 31, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 symfony 4.4.19+dfsg-2+deb11u7

Vulnerabilities 2

  • Low 3.1
    CVE-2024-50343

    Incorrect response from Validator when input ends with `\n` in symfony/validator

    symfony/validator is a module for the Symphony PHP framework which provides tools to validate values. It is possible to trick a `Validator` configured with a regular expression using the `$` metacharacters, with an input ending with `\n`. Symfony as of versio…

    symfony symfony symfony/symfony symfony Debian Ubuntu Packagist
  • Low 3.1
    CVE-2024-50345

    Open redirect via browser-sanitized URLs in symfony/http-foundation

    symfony/http-foundation is a module for the Symphony PHP framework which defines an object-oriented layer for the HTTP specification. The `Request` class, does not parse URI with special characters the same way browsers do. As a result, an attacker can trick …

    symfony symfony symfony symfony Debian Ubuntu Packagist