Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

GHSA-2XHG-W2G5-W95X CSV Injection in symfony/serializer

🗓️ 24 Nov 2021 21:01:23Reported by GoogleType 
osv
 osv🔗 osv.dev👁 31 Views

CSV Injection in symfony/serializer. Option added to prefix cells starting with specific characters to prevent formula injection. Resolution uses single quote for prefixing and includes more characters for prefix

Related
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB		CVE-2021-41270
24 Nov 202119:15
–attackerkb
Circl		CVE-2021-41270
24 Nov 202122:27
–circl
CNNVD		Sensio Labs Symfony 安全漏洞
24 Nov 202100:00
–cnnvd
CVE		CVE-2021-41270
24 Nov 202119:05
–cve
Cvelist		CVE-2021-41270 CSV Injection in Symfony
24 Nov 202119:05
–cvelist
Debian CVE		CVE-2021-41270
24 Nov 202119:05
–debiancve
EUVD		EUVD-2021-2280
7 Oct 202500:30
–euvd
Fedora		[SECURITY] Fedora 35 Update: php-symfony4-4.4.35-1.fc35
3 Dec 202101:16
–fedora
Fedora		[SECURITY] Fedora 34 Update: php-symfony4-4.4.35-1.fc34
3 Dec 202101:33
–fedora
Friends Of PHP		CVE-2021-41270: Prevent CSV Injection via formulas
15 Nov 202110:47
–friendsofphp
Rows per page
SourceLink
githubwww.github.com/symfony/symfony/security/advisories/GHSA-2xhg-w2g5-w95x
nvdwww.nvd.nist.gov/vuln/detail/CVE-2021-41270
githubwww.github.com/symfony/symfony/pull/44243
githubwww.github.com/symfony/symfony/commit/3da6f2d45e7536ccb2a26f52fbaf340917e208a8
githubwww.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/serializer/CVE-2021-41270.yaml
githubwww.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2021-41270.yaml
githubwww.github.com/symfony/symfony
githubwww.github.com/symfony/symfony/releases/tag/v5.3.12
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3BPT4SF6SIXFMZARDWED5T32J7JEH3EP
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QSREFD2TJT5LWKM6S4MD3W26NQQ5WJUP
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
08 Jul 2026 06:28Current
6.1Medium risk
Vulners AI Score6.1
CVSS 3.16.5
EPSS0.01355
csv injectionsymfony 4.1csvencoderowaspformula injectionpatchgithub commitbranch 4.4jake barwelljérémy derussé
31