Skip to content
OpenAdvisories

Package · Packagist

symfony/validator

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Low 3.1
    CVE-2024-50343

    Incorrect response from Validator when input ends with `\n` in symfony/validator

    symfony/validator is a module for the Symphony PHP framework which provides tools to validate values. It is possible to trick a `Validator` configured with a regular expression using the `$` metacharacters, with an input ending with `\n`. Symfony as of versio…

    symfony symfony symfony/symfony symfony Debian Ubuntu Packagist
  • High 7.5
    GHSA-4vf2-qfg3-7598

    symfony/validator XML Entity Expansion vulnerability

    Symfony 2.0.11 carried a [similar] XXE security fix, however, on review of ZF2 I also noted a vulnerability to XML Entity Expansion (XEE) attacks whereby all extensions making use of libxml2 have no defense against XEE Quadratic Blowup Attacks. The vulnerabil…

    symfony/validator Packagist
  • High 8.1
    CVE-2013-4751

    Symfony collectionCascaded and collectionCascadedDeeply fields security bypass

    php-symfony2-Validator has loss of information during serialization

    symfony/symfony symfony/validator Packagist