33 matches found
EUVD-2026-102109
Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process...
CLSA-2026-1792575614 TuxCare security update for symfony/yaml (1 CVE)
TuxCare rebuilt symfony/yaml to address 1 CVE. Fixed in v4.4.45-p3+tuxcare...
Linux Distros Unpatched Vulnerability : CVE-2026-109413
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Symfony YAML prior to versions 5.4.54, 6.4.45, 7.4.18, and 8.1.6, Yaml\Parser::lexInlineStructure recursed through lexInlineMapping and lexInlineSequence for...
UBUNTU-CVE-2026-109413
In Symfony YAML prior to versions 5.4.54, 6.4.45, 7.4.18, and 8.1.6, Yaml\Parser::lexInlineStructure recursed through lexInlineMapping and lexInlineSequence for every and of an inline collection, without entering the nesting level that the rest of the parser bounds with maxNestingLevel. A documen...
Uncontrolled Recursion
Overview Affected versions of this package are vulnerable to Uncontrolled Recursion via Parser::lexInlineStructure, which recurses through lexInlineMapping and lexInlineSequence without incrementing the shared nesting-level counter that guards against excessive depth. Because the maxNestingLevel...
CVE-2026-109413
In Symfony YAML prior to versions 5.4.54, 6.4.45, 7.4.18, and 8.1.6, Yaml\Parser::lexInlineStructure recursed through lexInlineMapping and lexInlineSequence for every and of an inline collection, without entering the nesting level that the rest of the parser bounds with maxNestingLevel. A documen...
DEBIAN-CVE-2026-109413
In Symfony YAML prior to versions 5.4.54, 6.4.45, 7.4.18, and 8.1.6, Yaml\Parser::lexInlineStructure recursed through lexInlineMapping and lexInlineSequence for every and of an inline collection, without entering the nesting level that the rest of the parser bounds with maxNestingLevel. A documen...
CVE-2026-109413
In Symfony YAML prior to versions 5.4.54, 6.4.45, 7.4.18, and 8.1.6, Yaml\Parser::lexInlineStructure recursed through lexInlineMapping and lexInlineSequence for every and of an inline collection, without entering the nesting level that the rest of the parser bounds with maxNestingLevel. A documen...
CVE-2026-109413
In Symfony YAML prior to versions 5.4.54, 6.4.45, 7.4.18, and 8.1.6, Yaml\Parser::lexInlineStructure recursed through lexInlineMapping and lexInlineSequence for every and of an inline collection, without entering the nesting level that the rest of the parser bounds with maxNestingLevel. A documen...
CVE-2026-109413
The symfony/yaml component is vulnerable to a denial of service (DoS) condition due to unbounded recursion in the Yaml eParser::lexInlineStructure() function. The root cause is that the lexer recurses through lexInlineMapping() and lexInlineSequence() for every { and [ character in an inline coll...
CVE-2026-109413
In Symfony YAML prior to versions 5.4.54, 6.4.45, 7.4.18, and 8.1.6, Yaml\Parser::lexInlineStructure recursed through lexInlineMapping and lexInlineSequence for every and of an inline collection, without entering the nesting level that the rest of the parser bounds with maxNestingLevel. A documen...
PT-2026-114952
Name of the Vulnerable Software and Affected Versions symfony/yaml versions 5.4.0 through 5.4.53 symfony/yaml versions 6.0.0-BETA1 through 6.4.44 symfony/yaml versions 7.0.0-BETA1 through 7.4.17 symfony/yaml versions 8.0.0-BETA1 through 8.1.5 Description The YamlParser::lexInlineStructure functio...
CVE-2026-109413: Uncontrolled Recursion
In Symfony YAML prior to versions 5.4.54, 6.4.45, 7.4.18, and 8.1.6, Yaml\Parser::lexInlineStructure recursed through lexInlineMapping and lexInlineSequence for every and of an inline collection, without entering the nesting level that the rest of the parser bounds with maxNestingLevel. A documen...
CLSA-2026-1787232806 TuxCare security update for symfony/yaml (1 CVE)
TuxCare rebuilt symfony/yaml to address 1 CVE. Fixed in v2.8.52-p3+tuxcare...
PT-2026-83606
TuxCare rebuilt symfony/yaml to address 1 CVE. Fixed in v2.8.52-p3+tuxcare...
CLSA-2026-1786399295 TuxCare security update for symfony/yaml (1 CVE)
TuxCare rebuilt symfony/yaml to address 1 CVE. Fixed in v2.8.52-p2+tuxcare...
PT-2026-80063
TuxCare rebuilt symfony/yaml to address 1 CVE. Fixed in v2.8.52-p2+tuxcare...
CLSA-2026-1784682954 TuxCare security update for symfony/yaml (1 CVE)
TuxCare rebuilt symfony/yaml to address 1 CVE. Fixed in v4.4.45-p2+tuxcare...