CVE-2026-118516

The Symfony Routing components (CompiledUrlMatcher and UrlMatcher) are vulnerable to a path-based authorization bypass in versions prior to 5.4.56 , 6.x prior to 6.4.50 , 7.x prior to 7.4.23 , and 8.x prior to 8.1.11 . The root cause is an interpretation conflict where CompiledUrlMatcher concaten...