Skip to content
OpenAdvisories

Package · Packagist

symfony/cache

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 6.3
    CVE-2026-45073

    Symfony: SQL Injection in PdoAdapter::doClear() via Unsanitized $prefix

    Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, PdoAdapter::doClear() builds a DELETE statement using a namespace derived from the caller-supplied $prefix without b…

    symfony cache symfony symfony Debian Ubuntu Packagist
  • Critical 9.8
    CVE-2019-18889 EPSS 33%

    Symfony Unsafe Cache Serialization Could Enable RCE

    An issue was discovered in Symfony 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7. Serializing certain cache adapter interfaces could result in remote code injection. This is related to symfony/cache.

    symfony/symfony symfony symfony symfony/cache Debian Ubuntu Packagist
  • High 7.1
    CVE-2019-10912

    Deserialization of untrusted data in Symfony

    In Symfony before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, it is possible to cache objects that may contain bad user input. On serialization or unserialization, this could result in the deletion of files that the current user has …

    typo3/cms typo3/cms-core symfony/symfony symfony Debian Ubuntu Packagist