CVE-2026-45075

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.12 and 8.0.12, method-scoped IsGranted, IsSignatureValid, and IsCsrfTokenValid attributes can be configured for GET only, but Symfony routes HEAD requests to the GET handler while the...

PT-2026-44144

Name of the Vulnerable Software and Affected Versions Symfony versions prior to 7.4 Description Attributes IsGranted'...', IsSignatureValid, and IsCsrfTokenValid... allow the definition of a methods: ... argument to enforce checks only for specific HTTP methods. Because the router serves HEAD...