PT-2026-44132

Name of the Vulnerable Software and Affected Versions Symfony versions prior to 5.4 Description The X509Authenticator component, which implements client-certificate mTLS authentication, contains a flaw in how it extracts user identifiers from the Subject DN Distinguished Name provided via $...

tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability

Summary A potential Regular Expression Denial of Service ReDoS vulnerability was identified in tarteaucitron.js in the handling of the issuuid parameter. Details The issue was caused by the use of insufficiently constrained regular expressions applied to attacker-controlled input: if...