Skip to content
OpenAdvisories

Package · Packagist

symfony/polyfill

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-46644

    symfony/polyfill-intl-idn accepts xn-- labels whose Punycode payload decodes to ASCII-only: insecure equivalence

    Symfony Polyfill backports PHP features and provides compatibility layers for extensions and functions. From 1.17.1 until 1.38.1, symfony/polyfill-intl-idn accepts xn-- labels whose Punycode payload is empty or decodes to ASCII-only code points because Idn::p…

    symfony polyfill-intl-idn polyfill nextcloud-server-33 Debian Ubuntu Wolfi Packagist
  • Medium —
    CVE-2013-5958

    Symfony Denial of Service Via Long Password Hashing

    The Security component in Symfony 2.0.x before 2.0.25, 2.1.x before 2.1.13, 2.2.x before 2.2.9, and 2.3.x before 2.3.6 allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as d…

    symfony/symfony symfony/security symfony/polyfill Packagist