Skip to content
OpenAdvisories

Package · Packagist

symfony/framework-bundle

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2019-10909 Public exploit

    Symfony Cross-site Scripting (XSS) vulnerability

    In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, validation messages are not escaped, which can lead to XSS when user input is included. This is related to symfony/framework-bundle.

    drupal/core symfony/symfony symfony symfony Debian Ubuntu Packagist