Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

symfony/cache

3 known vulnerabilities (1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 medium
Registry
Packagist

Advisories 3

  • CVE-2026-45073Medium 6.3

    Symfony: SQL Injection in PdoAdapter::doClear() via Unsanitized $prefix

    Affected: fixed in 5.4.52; from 6.0.0, fixed in 6.4.40; from 7.0.0, fixed in 7.4.12; from 8.0.0, fixed in 8.0.12.

  • An issue was discovered in Symfony 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7.

    Affected: from 3.1.0, fixed in 3.4.35; from 4.0.0, fixed in 4.2.12; from 4.3.0, fixed in 4.3.8.

  • In Symfony before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, it is possible to cache objects that may contain…

    Affected: from 3.1.0, fixed in 3.4.26; from 4.0.0, fixed in 4.1.12; from 4.2.0, fixed in 4.2.7.