CVE-2026-123792

The Symfony Yaml components (Inline and Parser) are vulnerable to inefficient parsing in versions prior to 5.4.56, 6.4.50, 7.4.23, and 8.1.11 . The root cause is repetitive processing of embedded mappings in flow sequences (leading to exponential growth with nesting depth) and quadratic matching ...

CVE-2026-123792 Symfony: Exponential and Quadratic Parse Times in the YAML Parser Let a Single Document Hold a Process

The Symfony Yaml components Inline and Parser, parse some YAML documents inefficiently, so that a small crafted document can take disproportionately long to process, keeping a PHP process busy for seconds or minutes, potentially causing a denial of service in Symfony versions prior to 5.4.56, 6.x...

CVE-2026-123792: sensiolabs symfony: The Symfony Yaml components Inline and Parser, parse some YAML documents inefficiently, so that a small crafted…

The Symfony Yaml components Inline and Parser, parse some YAML documents inefficiently, so that a small crafted document can take disproportionately long to process, keeping a PHP process busy for seconds or minutes, potentially causing a denial of service in Symfony versions prior to 5.4.56, 6.x...