Skip to content
OpenAdvisories

Package · Packagist

symfony/phpunit-bridge

1 known vulnerabilities.

1 result · Feed

  • High 7.1

    Deserialization of untrusted data in Symfony

    In Symfony before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, it is possible to cache objects that may contain bad user input. On serialization or unserialization, this could result in the deletion of files that the current user has …