CVE-2026-123119

The Symfony HttpClient component's NoPrivateNetworkHttpClient is vulnerable to DNS rebinding because it fails to pin the checked IP address for cached hosts. While the component correctly checks the IP on the first lookup, subsequent requests allow the decorated client to perform its own resoluti...