Products: 4
Vulnerabilities: 74
Known Exploited: 0
7
Critical Level Threats
19
High Level Threats
37
Medium Level Threats
4
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-121949
Symfony: HtmlSanitizer Does Not URL-Sanitize srcset and imagesrcset: Media Scheme and Host Allow-List Bypass
Last Modified: Nov 05, 2026
Published: Nov 05, 2026
CVE-2026-118517
Symfony: HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URLs Without a Well-Formed Authority (Incomplete Fix for CVE-2026-45066)
Last Modified: Nov 05, 2026
Published: Nov 05, 2026
CVE-2026-123125
Symfony: Ip Constraint public/private Modes Accept IPv4-Mapped and IPv4-Compatible IPv6 Addresses allowing SSRF Filter Bypass
Last Modified: Nov 05, 2026
Published: Nov 05, 2026
CVE-2026-123119
Symfony: NoPrivateNetworkHttpClient Does Not Pin the Checked IP of Cached Hosts, Letting DNS Rebinding Enumerate Internal Ports (Incomplete Fix for CVE-2024-50342)
Last Modified: Nov 05, 2026
Published: Nov 05, 2026
CVE-2026-121971
Symfony: ScopingHttpClient Sends the Credentials of Its Default Scope to Other Origins Through Network-Path References
Last Modified: Nov 04, 2026
Published: Nov 04, 2026
Items Per Page
