CVE-2026-84451

Incomplete fix for GHSA-73p7-m7gg-w2jv leaves libheif 1.23.1 vulnerable to an out-of-bounds read...

CVE-2026-84450

clap + oversized ispe aborts on an assert in Fraction::Fraction incomplete fix for GHSA-jc8f-p23p-5hjg...

CVE-2023-1601

Removed by vendor...

`{% sandbox %}{% include %}` skips checkSecurity() on cached templates (incomplete fix for CVE-2024-45411)

More info at https://symfony.com/cve-2026-46638...