Skip to content
OpenAdvisories

Package · Packagist

symfony/mime

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-45067 Public exploit

    Symfony: Email Header / SMTP Command Injection via CRLF in Symfony\Component\Mime\Address

    ### Description `Symfony\Component\Mime\Address` is the value-object every Symfony Mailer address (to/cc/bcc/from/reply-to) flows through; its constructor is documented as validating the address and throwing on invalid input, so developers treat it as a secur…

    symfony symfony nextcloud-server-33 symfony/symfony Debian Ubuntu Wolfi Packagist