54 matches found
CVE-2026-108082
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.54, 6.4.46, 7.4.19, and 8.1.7, HeaderUtils::split parsed header values with a pattern whose token alternative also matched whitespace, followed by a ?!\s lookbehind. A run of...
UBUNTU-CVE-2026-108082
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.54, 6.4.46, 7.4.19, and 8.1.7, HeaderUtils::split parsed header values with a pattern whose token alternative also matched whitespace, followed by a ?!\s lookbehind. A run of...
CVE-2026-108082
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.54, 6.4.46, 7.4.19, and 8.1.7, HeaderUtils::split parsed header values with a pattern whose token alternative also matched whitespace, followed by a ?!\s lookbehind. A run of...
EUVD-2026-102102
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.54, 6.4.46, 7.4.19, and 8.1.7, HeaderUtils::split parsed header values with a pattern whose token alternative also matched whitespace, followed by a ?!\s lookbehind. A run of...
CVE-2026-108082 Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.54, 6.4.46, 7.4.19, and 8.1.7, HeaderUtils::split parsed header values with a pattern whose token alternative also matched whitespace, followed by a ?!\s lookbehind. A run of...
CVE-2026-108082
The symfony/http-foundation component is vulnerable to a Regular Expression Denial of Service (ReDoS) in the HeaderUtils::split() function. The root cause is a regex pattern that matches whitespace followed by a lookbehind; an attacker can provide a long sequence of whitespace in the Cache-Contro...
PT-2026-114951
Name of the Vulnerable Software and Affected Versions symfony/http-foundation versions 4.1.0-BETA1 through 5.4.53 symfony/http-foundation versions 6.0.0-BETA1 through 6.4.45 symfony/http-foundation versions 7.0.0-BETA1 through 7.4.18 symfony/http-foundation versions 8.0.0-BETA1 through 8.1.6...
Astra Linux – Vulnerability in symfony
Symfony/http-foundation is a module for the Symphony PHP framework that defines an object-oriented layer for handling HTTP requests. The Request class does not parse URIs containing special characters in the same way that browsers do. As a result, attackers can trick validators that rely on the...
CLSA-2026-1790173339 TuxCare security update for symfony/http-foundation (1 CVE)
TuxCare rebuilt symfony/http-foundation to address 1 CVE. Fixed in 2.8.52-p2+tuxcare...
PT-2026-105396
TuxCare rebuilt symfony/http-foundation to address 1 CVE. Fixed in 2.8.52-p2+tuxcare...
CLSA-2026-1783645391 TuxCare security update for symfony/http-kernel (1 CVE)
TuxCare rebuilt symfony/http-kernel to address 1 CVE. Fixed in v7.4.10-p1+tuxcare...
CLSA-2025-1766451449 TuxCare security update for symfony/http-foundation (1 CVE)
TuxCare rebuilt symfony/http-foundation to address 1 CVE. Fixed in 4.4.49-p1+tuxcare...
CLSA-2026-1768265576 TuxCare security update for symfony/http-foundation (1 CVE)
TuxCare rebuilt symfony/http-foundation to address 1 CVE. Fixed in 2.8.52-p1+tuxcare...
CLSA-2026-1778978921 TuxCare security update for symfony/http-foundation (2 CVEs)
TuxCare rebuilt symfony/http-foundation to address 2 CVEs. Fixed in 3.4.47-p3+tuxcare...
PT-2026-75354
TuxCare rebuilt symfony/http-kernel to address 1 CVE. Fixed in v7.4.10-p1+tuxcare...
PT-2026-75326
TuxCare rebuilt symfony/http-kernel to address 1 CVE. Fixed in v3.4.49-p1+tuxcare...
PT-2026-73669
TuxCare rebuilt symfony/http-foundation to address 1 CVE. Fixed in 4.4.49-p1+tuxcare...
PT-2026-74129
TuxCare rebuilt symfony/http-foundation to address 1 CVE. Fixed in 4.4.49-p2+tuxcare...