Symfony/framework-bundle
This hub aggregates every CVE we track for Symfony/framework-bundle, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.
3
CVEs tracked
0
Critical
1
High
0
In CISA KEV
Severity distribution
HIGH1MEDIUM1
Monthly trend
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
2024-102026-09
Latest CVEs
The 3 most recently published vulnerabilities affecting Symfony/framework-bundle.
- CVE-2014-4931Code injection in the way Symfony implements translation caching in FrameworkBundle
- CVE-2022-23601CSRF token missing in Symfony8.1
- CVE-2019-10909In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, validation messages are not escaped, which can lead to XSS when user input is included. ...5.4
Product normalization is registry-driven with AI assist and human review. How it works