Skip to content
OpenAdvisories

Package · Packagist

symfony/process

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.3
    CVE-2026-24739

    Symfony has incorrect argument escaping under MSYS2/Git Bash on Windows that can lead to destructive file operations

    Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.51, 6.4.33, 7.3.11, 7.4.5, and 8.0.5, the Symfony Process component did not correctly treat some characters (notably `=`) as “special” when…

    symfony symfony nextcloud-server-33 symfony/symfony Wolfi Packagist
  • None 0.0
    CVE-2024-51736

    Command execution hijack on Windows with Process class in symfony/process

    Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. On Windows, when an executable file named `cmd.exe` is located in the current working directory it will be called by the `Process` class when preparing comma…

    symfony symfony symfony/symfony symfony/process Packagist