Skip to content
OpenAdvisories

Package · Packagist

symfony/process

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-24739

    Symfony has incorrect argument escaping under MSYS2/Git Bash on Windows that can lead to destructive file operations

    Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.51, 6.4.33, 7.3.11, 7.4.5, and 8.0.5, the Symfony Process component did not correctly treat some characters (notably `=`) as “special” when…

    symfony symfony nextcloud-server-33 symfony/symfony Wolfi Packagist