Package · Packagist

symfony/dependency-injection

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2019-10910

Symfony Service IDs Allow Injection

In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, when service ids allow user input, this could allow for SQL Injection and remote code execution. This is related to symfony/dependency-injection.

symfony/symfony symfony symfony symfony/dependency-injection Debian Ubuntu Packagist

May 16, 2019