Skip to content
OpenAdvisories

Package · Packagist

symfony/validator

3 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5

    symfony/validator XML Entity Expansion vulnerability

    Symfony 2.0.11 carried a [similar] XXE security fix, however, on review of ZF2 I also noted a vulnerability to XML Entity Expansion (XEE) attacks whereby all extensions making use of libxml2 have no defense against XEE Quadratic Blowup Attacks. The vulnerabil…

  • High 8.1

    Symfony collectionCascaded and collectionCascadedDeeply fields security bypass

    php-symfony2-Validator has loss of information during serialization