Products: 26
    Vulnerabilities: 56
    Known Exploited: 0
    1
    Critical Level Threats
    8
    High Level Threats
    4
    Medium Level Threats
    6
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-49215

    Symfony UX: CSRF Protection Bypass in symfony/ux-live-component — Accept Header is CORS-Safelisted

    Last Modified: Jul 17, 2026
    Published: Jul 17, 2026

    CVE-2026-49216

    Symfony UX: XSS in symfony/ux-autocomplete via unescaped AJAX response data

    Last Modified: Jul 21, 2026
    Published: Jul 17, 2026

    CVE-2026-49211

    Symfony UX: Information exposure via unescaped LIKE wildcards in EntitySearchUtil

    Last Modified: Jul 17, 2026
    Published: Jul 17, 2026

    CVE-2026-49208

    Symfony UX: Format-less date LiveProps parsed with the permissive DateTime constructor

    Last Modified: Jul 21, 2026
    Published: Jul 17, 2026

    CVE-2026-49210

    Symfony UX: XSS in symfony/ux-live-component via attacker-controlled child component tag

    Last Modified: Jul 17, 2026
    Published: Jul 17, 2026
    Items Per Page
    Symfony Vulnerabilities & Security CVEs | CVE-DB