141 matches found
CVE-2026-121373
The Symfony HtmlSanitizer component MetaRefreshAttributeSanitizer, introduced to fix CVE-2026-48761, sanitizes the refresh URL of content attributes of meta tags using a regular expression that is too narrow, allowing sanitization to be bypassed, and resulting in potential URL redirection to...
CVE-2026-121949
The Symfony HtmlSanitizer component does not apply the media URL policy to the srcset and imagesrcset attributes, allowing values that point to hosts or schemes not permitted by allowMediaSchemes or allowMediaHosts to bypass it, so that browsers load images from disallowed hosts in Symfony versio...
CVE-2026-118517
A flaw was found in the Symfony HtmlSanitizer component. Due to differences in how URLs are parsed compared to web browsers, the component fails to properly detect hosts in certain malformed URLs when host allowlists are enforced. A remote attacker can exploit this vulnerability by submitting...
CVE-2026-121949
The Symfony HtmlSanitizer component does not apply the media URL policy to the srcset and imagesrcset attributes, allowing values that point to hosts or schemes not permitted by allowMediaSchemes or allowMediaHosts to bypass it, so that browsers load images from disallowed hosts in Symfony versio...
Linux Distros Unpatched Vulnerability : CVE-2026-121949
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Symfony HtmlSanitizer component does not apply the media URL policy to the srcset and imagesrcset attributes, allowing values that point to hosts or schemes...
UBUNTU-CVE-2026-121949
The Symfony HtmlSanitizer component does not apply the media URL policy to the srcset and imagesrcset attributes, allowing values that point to hosts or schemes not permitted by allowMediaSchemes or allowMediaHosts to bypass it, so that browsers load images from disallowed hosts in Symfony versio...
DEBIAN-CVE-2026-121949
The Symfony HtmlSanitizer component does not apply the media URL policy to the srcset and imagesrcset attributes, allowing values that point to hosts or schemes not permitted by allowMediaSchemes or allowMediaHosts to bypass it, so that browsers load images from disallowed hosts in Symfony versio...
CVE-2026-121949
The Symfony HtmlSanitizer component does not apply the media URL policy to the srcset and imagesrcset attributes, allowing values that point to hosts or schemes not permitted by allowMediaSchemes or allowMediaHosts to bypass it, so that browsers load images from disallowed hosts in Symfony versio...
CVE-2026-121949 Symfony: HtmlSanitizer Does Not URL-Sanitize srcset and imagesrcset: Media Scheme and Host Allow-List Bypass
The Symfony HtmlSanitizer component does not apply the media URL policy to the srcset and imagesrcset attributes, allowing values that point to hosts or schemes not permitted by allowMediaSchemes or allowMediaHosts to bypass it, so that browsers load images from disallowed hosts in Symfony versio...
CVE-2026-121949 Symfony: HtmlSanitizer Does Not URL-Sanitize srcset and imagesrcset: Media Scheme and Host Allow-List Bypass
The Symfony HtmlSanitizer component does not apply the media URL policy to the srcset and imagesrcset attributes, allowing values that point to hosts or schemes not permitted by allowMediaSchemes or allowMediaHosts to bypass it, so that browsers load images from disallowed hosts in Symfony versio...
CVE-2026-121949
The Symfony HtmlSanitizer component fails to apply media URL policies to the srcset and imagesrcset attributes. In affected versions, these attributes are allowed by the sanitizer but their URL candidates are never validated, allowing them to be kept verbatim while the src attribute is correctly ...
EUVD-2026-117624
The Symfony HtmlSanitizer component does not apply the media URL policy to the srcset and imagesrcset attributes, allowing values that point to hosts or schemes not permitted by allowMediaSchemes or allowMediaHosts to bypass it, so that browsers load images from disallowed hosts in Symfony versio...
DEBIAN-CVE-2026-118517
The Symfony HtmlSanitizer component UrlSanitizer parses URLs differently from browsers, allowing the allowLinkHosts and allowMediaHosts checks to be bypassed for URLs without a well-formed authority, resulting in untrusted hosts being referenced in sanitized output in Symfony versions 6.1.x prior...
CVE-2026-118517
The Symfony HtmlSanitizer component UrlSanitizer parses URLs differently from browsers, allowing the allowLinkHosts and allowMediaHosts checks to be bypassed for URLs without a well-formed authority, resulting in untrusted hosts being referenced in sanitized output in Symfony versions 6.1.x prior...
EUVD-2026-117579
The Symfony HtmlSanitizer component UrlSanitizer parses URLs differently from browsers, allowing the allowLinkHosts and allowMediaHosts checks to be bypassed for URLs without a well-formed authority, resulting in untrusted hosts being referenced in sanitized output in Symfony versions 6.1.x prior...
CVE-2026-118517
The Symfony HtmlSanitizer component's UrlSanitizer is vulnerable to a host validation bypass because it parses URLs using the league/uri library (RFC 3986), which differs from the WHATWG URL standard used by browsers. This discrepancy allows attackers to bypass allowLinkHosts() and allowMediaHost...
CVE-2026-118517 Symfony: HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URLs Without a Well-Formed Authority (Incomplete Fix for CVE-2026-45066)
The Symfony HtmlSanitizer component UrlSanitizer parses URLs differently from browsers, allowing the allowLinkHosts and allowMediaHosts checks to be bypassed for URLs without a well-formed authority, resulting in untrusted hosts being referenced in sanitized output in Symfony versions 6.1.x prior...
CVE-2026-118517 Symfony: HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URLs Without a Well-Formed Authority (Incomplete Fix for CVE-2026-45066)
The Symfony HtmlSanitizer component UrlSanitizer parses URLs differently from browsers, allowing the allowLinkHosts and allowMediaHosts checks to be bypassed for URLs without a well-formed authority, resulting in untrusted hosts being referenced in sanitized output in Symfony versions 6.1.x prior...
CVE-2026-118517
The Symfony HtmlSanitizer component UrlSanitizer parses URLs differently from browsers, allowing the allowLinkHosts and allowMediaHosts checks to be bypassed for URLs without a well-formed authority, resulting in untrusted hosts being referenced in sanitized output in Symfony versions 6.1.x prior...
Linux Distros Unpatched Vulnerability : CVE-2026-121373
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Symfony HtmlSanitizer component MetaRefreshAttributeSanitizer, introduced to fix CVE-2026-48761, sanitizes the refresh URL of content attributes of meta tag...