Skip to content
OpenAdvisories

Package · Packagist

symfony/dependency-injection

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    GHSA-c636-cg5r-2498

    Symfony XML Entity Expansion security vulnerability

    Symfony 2.0.11 carried a [similar] XXE security fix, however, on review of ZF2 I also noted a vulnerability to XML Entity Expansion (XEE) attacks whereby all extensions making use of libxml2 have no defense against XEE Quadratic Blowup Attacks. The vulnerabil…

    symfony/dependency-injection Packagist