26 matches found
CLSA-2026-1790173339 TuxCare security update for symfony/http-foundation (1 CVE)
TuxCare rebuilt symfony/http-foundation to address 1 CVE. Fixed in 2.8.52-p2+tuxcare...
PT-2026-105396
TuxCare rebuilt symfony/http-foundation to address 1 CVE. Fixed in 2.8.52-p2+tuxcare...
Astra Linux – Vulnerability in symfony
Symfony/http-foundation is a module for the Symphony PHP framework that defines an object-oriented layer for handling HTTP requests. The Request class does not parse URIs containing special characters in the same way that browsers do. As a result, attackers can trick validators that rely on the...
CLSA-2025-1766451449 TuxCare security update for symfony/http-foundation (1 CVE)
TuxCare rebuilt symfony/http-foundation to address 1 CVE. Fixed in 4.4.49-p1+tuxcare...
CLSA-2026-1768265576 TuxCare security update for symfony/http-foundation (1 CVE)
TuxCare rebuilt symfony/http-foundation to address 1 CVE. Fixed in 2.8.52-p1+tuxcare...
CLSA-2026-1778978921 TuxCare security update for symfony/http-foundation (2 CVEs)
TuxCare rebuilt symfony/http-foundation to address 2 CVEs. Fixed in 3.4.47-p3+tuxcare...
PT-2026-73694
TuxCare rebuilt symfony/http-foundation to address 1 CVE. Fixed in 2.8.52-p1+tuxcare...
PT-2026-74769
TuxCare rebuilt symfony/http-foundation to address 2 CVEs. Fixed in 3.4.47-p3+tuxcare...
PT-2026-74768
TuxCare rebuilt symfony/http-foundation to address 2 CVEs. Fixed in 3.4.47-p3+tuxcare...
PT-2026-73669
TuxCare rebuilt symfony/http-foundation to address 1 CVE. Fixed in 4.4.49-p1+tuxcare...
PT-2026-74129
TuxCare rebuilt symfony/http-foundation to address 1 CVE. Fixed in 4.4.49-p2+tuxcare...
Linux Distros Unpatched Vulnerability : CVE-2024-50345
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - symfony/http-foundation is a module for the Symphony PHP framework which defines an object-oriented layer for the HTTP specification. The Request class, does no...
Improper URI Parsing
symfony/http-foundation is vulnerable to Improper URI Parsing. The vulnerability is due to improper parsing of URIs with special characters by the Request class, which does not align with browser behavior, allowing attackers to exploit validators and redirect users to malicious domains...
UBUNTU-CVE-2024-50345
symfony/http-foundation is a module for the Symphony PHP framework which defines an object-oriented layer for the HTTP specification. The Request class, does not parse URI with special characters the same way browsers do. As a result, an attacker can trick a validator relying on the Request class...
CVE-2024-50345 Open redirect via browser-sanitized URLs in symfony/http-foundation
symfony/http-foundation is a module for the Symphony PHP framework which defines an object-oriented layer for the HTTP specification. The Request class, does not parse URI with special characters the same way browsers do. As a result, an attacker can trick a validator relying on the Request class...
CVE-2024-50345
symfony/http-foundation is a module for the Symphony PHP framework which defines an object-oriented layer for the HTTP specification. The "Request" class, does not parse URI with special characters the same way browsers do. As a result, an attacker can trick a validator relying on the "Request"...
CVE-2024-50345: URL Redirection to Untrusted Site
symfony/http-foundation is a module for the Symphony PHP framework which defines an object-oriented layer for the HTTP specification. The Request class, does not parse URI with special characters the same way browsers do. As a result, an attacker can trick a validator relying on the Request class...
CVE-2020-5274: Generation of Error Message Containing Sensitive Information
In Symfony before versions 5.0.5 and 4.4.5, some properties of the Exception were not properly escaped when the ErrorHandler rendered it stacktrace. In addition, the stacktrace were displayed even in a non-debug configuration. The ErrorHandler now escape alls properties of the exception, and the...
CVE-2019-18888
An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7. If an application passes unvalidated user input as the file for which MIME type validation should occur, then arbitrary arguments are passed to the underlying file command...
CVE-2019-18888: Improper Neutralization of Argument Delimiters in a Command
An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7. If an application passes unvalidated user input as the file for which MIME type validation should occur, then arbitrary arguments are passed to the underlying file command...