Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

symfony/validator

3 known vulnerabilities (1 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 medium, 1 low
Registry
Packagist

Advisories 3

  • CVE-2026-123125Medium 6.3

    Symfony: Ip Constraint public/private Modes Accept IPv4-Mapped and IPv4-Compatible IPv6 Addresses allowing SSRF Filter Bypass

    Affected: fixed in 5.4.56; from 6.0.0, fixed in 6.4.50; from 7.0.0, fixed in 7.4.23; from 8.0.0, fixed in 8.1.11.

  • Incorrect response from Validator when input ends with `\n` in symfony/validator

    Affected: fixed in 5.4.43; from 6.0.0, fixed in 6.4.11; from 7.0.0, fixed in 7.1.4.

  • php-symfony2-Validator has loss of information during serialization

    Affected: from 2.0.0, fixed in 2.0.24; from 2.1.0, fixed in 2.1.12; from 2.2.0, fixed in 2.2.5; from 2.3.0, fixed in 2.3.3.