Skip to content
OpenAdvisories

Package · Packagist

symfony/http-client

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.9
    CVE-2026-48736

    Symfony: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms (6to4, NAT64, Teredo, IPv4-compatible): SSRF Bypass in NoPrivateNetworkHttpClient

    Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 5.4.0 to 5.4.53, 6.4.41, 7.4.13, and 8.0.13, NoPrivateNetworkHttpClient and IpUtils::PRIVATE_SUBNETS omitted IPv6 transition prefixes such as 6to4, NAT64, T…

    symfony symfony http-client http-foundation Debian Ubuntu Wolfi Packagist
  • Low 3.1
    CVE-2024-50342

    Internal address and port enumeration allowed by NoPrivateNetworkHttpClient in symfony/http-client

    symfony/http-client is a module for the Symphony PHP framework which provides powerful methods to fetch HTTP resources synchronously or asynchronously. When using the `NoPrivateNetworkHttpClient`, some internal information is still leaking during host resolut…

    symfony symfony symfony/symfony symfony Debian Ubuntu Packagist