CLSA-2026-1783645401 TuxCare security update for symfony/routing (2 CVEs)

TuxCare rebuilt symfony/routing to address 2 CVEs. Fixed in v3.4.47-p1+tuxcare...

CLSA-2026-1782867591 TuxCare security update for symfony/routing (2 CVEs)

TuxCare rebuilt symfony/routing to address 2 CVEs. Fixed in v6.4.37-p1+tuxcare...

CLSA-2026-1782867589 TuxCare security update for symfony/routing (2 CVEs)

TuxCare rebuilt symfony/routing to address 2 CVEs. Fixed in v7.4.9-p1+tuxcare...

Incorrect Regular Expression

Overview Affected versions of this package are vulnerable to Incorrect Regular Expression in the route URL requirements when a requirement is set as an alternation such as locale: 'ar|bg|...|vi|...|zhCN'. An attacker can bypass security redirect restrictions by suppling a URL that passes any but...