1 matches found
CVE-2026-49208
CVE-2026-49208 (Symfony UX LiveComponent) : Vulnerability occurs when a writable #[LiveProp] is typed as DateTimeInterface with no explicit format, allowing client-supplied strings like now/tomorrow/+10 years to bypass checks via LiveComponentHydrator::hydrateObjectValue(), effectively moving tim...
6.9CVSS5.2AI score0.0024EPSS
SaveExploits0References4Affected Software1
20