Skip to content
OpenAdvisories

Package · Packagist

symfony/web-profiler-bundle

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 2.0
    CVE-2026-45072

    Symfony: Stored XSS in WebProfiler CodeExtension::fileExcerpt() — Unescaped Non-PHP File Rendering

    Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.4.24 until 6.4.40, 7.4.12, and 8.0.12, the development profiler file_excerpt Twig filter escapes PHP files through highlight_string() but interpolates lin…

    symfony symfony twig-bridge web-profiler-bundle Debian Ubuntu Packagist
  • High 8.1
    CVE-2014-6072

    Symfony Cross-Site Request Forgery vulnerability in the Web Profiler

    All 2.0.X, 2.1.X, 2.2.X, 2.3.X, 2.4.X, and 2.5.X versions of the Symfony WebProfiler bundle are affected by this security issue. This issue has been fixed in Symfony 2.3.19, 2.4.9, and 2.5.4. Note that no fixes are provided for Symfony 2.0, 2.1, and 2.2 as th…

    symfony/symfony symfony/web-profiler-bundle Packagist