Skip to content
OpenAdvisories

Package · Packagist

friendsofsymfony1/symfony1

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2024-28861

    Gadget chain in Symfony 1 due to uncontrolled unserialized input in sfNamespacedParameterHolder

    Symfony 1 is a community-driven fork of the 1.x branch of Symfony, a PHP framework for web projects. Starting in version 1.1.0 and prior to version 1.5.19, Symfony 1 has a gadget chain due to dangerous deserialization in `sfNamespacedParameterHolder` class th…

    FriendsOfSymfony1 symfony1 friendsofsymfony1/symfony1 Packagist
  • Medium 5.0
    CVE-2024-28859

    Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency

    Symfony1 is a community fork of symfony 1.4 with DIC, form enhancements, latest Swiftmailer, better performance, composer compatible and PHP 8 support. Symfony 1 has a gadget chain due to vulnerable Swift Mailer dependency that would enable an attacker to get…

    FriendsOfSymfony1 symfony1 swiftmailer/swiftmailer friendsofsymfony1/symfony1 Packagist