1961 matches found
CVE-2026-118513: X509Authenticator and X509AuthenticationListener Read Escaped RFC 2253 Commas and Bare Slashes Inside a DN Value as RDN Boundaries: Incomplete Fix for CVE-2026-45063
More info at https://symfony.com/cve-2026-118513...
Cross-site Scripting (XSS)
More info at https://security.snyk.io/vuln/SNYK-PHP-APTOMATWIGMARKDOWN-8400480...
Cross-site Scripting (XSS)
More info at https://security.snyk.io/vuln/SNYK-PHP-DRUPALPATTERNLABBEMTWIGEXTENSION-8400878...
SS-2026-007 - RCE via template string escaping in advanced workflow email template
More info at https://www.silverstripe.org/download/security-releases/ss-2026-007...
Exponential and Quadratic Parse Times in the YAML Parser Let a Single Document Hold a Process
More info at https://github.com/symfony/symfony/security/advisories/GHSA-hwfg-qwvh-2wfx...
Cross-site Scripting (XSS)
More info at https://security.snyk.io/vuln/SNYK-PHP-DRUPALPATTERNLABADDATTRIBUTESTWIGEXTENSION-8400879...
CVE-2026-55186 - Can bypass MFA during password reset flow
More info at https://www.silverstripe.org/download/security-releases/cve-2026-55186...
CVE-2026-100869: Shop API accepts arbitrary PaymentRequest actions, allowing a customer-triggered refund
More info at https://github.com/Sylius/Sylius/security/advisories/GHSA-2rv4-pjmm-7fxf...
CVE-2026-118516: Host Placeholders Can Match the Start of the Path in Compiled URL Matchers, Bypassing Path-Based Access Control
More info at https://symfony.com/cve-2026-118516...
DataUriNormalizer Opens Data URIs With a Non-Lowercase Scheme as Local Files, Letting a Client Read Any Server File
More info at https://github.com/symfony/symfony/security/advisories/GHSA-pxj9-jh84-vhm5...
CVE-2026-118515: The Serializer Builds UploadedFile Objects From Request Data, Letting a Client Point an Upload at Any Server File
More info at https://symfony.com/cve-2026-118515...
SS-2026-002 - Template injection RCE in advanced workflow
More info at https://www.silverstripe.org/download/security-releases/ss-2026-002...
Percent-encoded API path bypasses shop API ownership filters, exposing and modifying other customers' data
More info at https://github.com/Sylius/Sylius/security/advisories/GHSA-cqw6-3fwg-cfv4...
Host header injection in the shop password reset e-mail link when the channel has no hostname
More info at https://github.com/Sylius/Sylius/security/advisories/GHSA-v78h-66q4-h9px...
A disabled API stays reachable through a percent-encoded path
More info at https://github.com/Sylius/Sylius/security/advisories/GHSA-mw28-p745-4jrv...
Channel-based payment method restriction bypass on shop payment request API endpoint
More info at https://github.com/Sylius/Sylius/security/advisories/GHSA-ccgh-6w73-crf8...
Programmatic Logins Skip the checkPostAuth() Method of User Checkers
More info at https://github.com/symfony/symfony/security/advisories/GHSA-8f57-m8wj-x65w...
Exponential and Quadratic Parse Times in the YAML Parser Let a Single Document Hold a Process
More info at https://github.com/symfony/symfony/security/advisories/GHSA-hwfg-qwvh-2wfx...
CVE-2026-118517: HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URLs Without a Well-Formed Authority: Incomplete Fix for CVE-2026-45066
More info at https://symfony.com/cve-2026-118517...
ObjectNormalizer Dotted-Key Property-Path Traversal Bypasses #[Ignore] on Nested Objects
More info at https://github.com/symfony/symfony/security/advisories/GHSA-hqp2-7rr8-hf26...
DataUriNormalizer Opens Data URIs With a Non-Lowercase Scheme as Local Files, Letting a Client Read Any Server File
More info at https://github.com/symfony/symfony/security/advisories/GHSA-pxj9-jh84-vhm5...
AAD parameter not correctly bound in File cryptography
More info at https://github.com/paragonie/halite/security/advisories/GHSA-jw8x-c445-phrm...
Ip Constraint public/private Modes Accept IPv4-Mapped and IPv4-Compatible IPv6 Addresses: SSRF Filter Bypass
More info at https://github.com/symfony/symfony/security/advisories/GHSA-4qpf-57w4-m3wc...
Ip Constraint public/private Modes Accept IPv4-Mapped and IPv4-Compatible IPv6 Addresses: SSRF Filter Bypass
More info at https://github.com/symfony/symfony/security/advisories/GHSA-4qpf-57w4-m3wc...
Inline Fragments Let Untrusted Forwarded Headers Set the Host, Scheme and Port of the URLs Generated for the Main Request
More info at https://github.com/symfony/symfony/security/advisories/GHSA-wg5q-m2ww-f3c9...
ScopingHttpClient Sends the Credentials of Its Default Scope to Other Origins Through Network-Path References
More info at https://github.com/symfony/symfony/security/advisories/GHSA-gq53-v8w2-gjhj...
The "private_ranges" Trusted Proxies Shortcut Trusts Clients Presenting an IPv4-Mapped, 6to4, Teredo or NAT64 Address as Reverse Proxies
More info at https://github.com/symfony/symfony/security/advisories/GHSA-xg2q-4rrq-657q...
Memory exhaustion when decoding malicious zlib/deflate streams
More info at https://github.com/PrinsFrank/pdfparser/security/advisories/GHSA-gv74-739g-57r7...
HtmlSanitizer Does Not URL-Sanitize srcset and imagesrcset: Media Scheme and Host Allow-List Bypass
More info at https://github.com/symfony/symfony/security/advisories/GHSA-q8jq-xrf4-v5j8...
Incomplete Fix for CVE-2026-45756: JsonPath Queries Can Still Hold a Process Through search(), match() and Chained Filters
More info at https://github.com/symfony/symfony/security/advisories/GHSA-cpww-5vpx-72x7...
XXE (Local File Read) in Config XmlUtils::parse() via validateOnParse = true
More info at https://github.com/symfony/symfony/security/advisories/GHSA-5jff-8h8q-r5qx...
Unpublished product reviews disclosed through the Shop API item endpoint
More info at https://github.com/Sylius/Sylius/security/advisories/GHSA-5mpg-w6q2-2vrw...
Inline Fragments Let Untrusted Forwarded Headers Set the Host, Scheme and Port of the URLs Generated for the Main Request
More info at https://github.com/symfony/symfony/security/advisories/GHSA-wg5q-m2ww-f3c9...
Exponential and Quadratic Parse Times in the YAML Parser Let a Single Document Hold a Process
More info at https://github.com/symfony/symfony/security/advisories/GHSA-hwfg-qwvh-2wfx...
ScopingHttpClient Sends the Credentials of Its Default Scope to Other Origins Through Network-Path References
More info at https://github.com/symfony/symfony/security/advisories/GHSA-gq53-v8w2-gjhj...
HtmlSanitizer Does Not URL-Sanitize srcset and imagesrcset: Media Scheme and Host Allow-List Bypass
More info at https://github.com/symfony/symfony/security/advisories/GHSA-q8jq-xrf4-v5j8...
NoPrivateNetworkHttpClient Does Not Pin the Checked IP of Cached Hosts, Letting DNS Rebinding Enumerate Internal Ports: Incomplete Fix for CVE-2024-50342
More info at https://github.com/symfony/symfony/security/advisories/GHSA-c7hm-wqwp-f9v8...
ScopingHttpClient Sends the Credentials of Its Default Scope to Other Origins Through Network-Path References
More info at https://github.com/symfony/symfony/security/advisories/GHSA-gq53-v8w2-gjhj...
Path traversal in OpenAPI document route allows reading arbitrary files
More info at https://github.com/hms5232/laravel-swagger/security/advisories/GHSA-jmrx-p2pv-cj26...
OAuth middleware endpoints bypass request body limits and allow unauthenticated memory exhaustion
More info at https://github.com/modelcontextprotocol/php-sdk/security/advisories/GHSA-f4rf-6ghj-mhr6...
Improper access control in the table access voter (see GHSA-5974-gfqc-wrcm)
More info at https://contao.org/en/security-advisories/improper-access-control-in-the-table-access-voter...
Improper access control in the table access voter (see GHSA-5974-gfqc-wrcm)
More info at https://contao.org/en/security-advisories/improper-access-control-in-the-table-access-voter...
Cross-site request forgery in custom backend actions (see GHSA-9ff2-p842-45wq)
More info at https://contao.org/en/security-advisories/cross-site-request-forgery-in-custom-backend-actions...
Exposure of sensitive information through a stale search index (see GHSA-x2rp-9qf7-2fmq)
More info at https://contao.org/en/security-advisories/exposure-of-sensitive-information-through-a-stale-search-index...
Improper access control in the CSV import wizard (see GHSA-23w9-4pg3-xwm3)
More info at https://contao.org/en/security-advisories/improper-access-control-in-the-csv-import-wizard...
Cross-site scripting in the frontend search results (see GHSA-h57j-5f5m-789v)
More info at https://contao.org/en/security-advisories/cross-site-scripting-in-the-frontend-search-results...
Non-admin users can self-grant permissions that implicitly make them administrators (see GHSA-r9qp-pqx5-8369)
More info at https://contao.org/en/security-advisories/non-admin-users-can-self-grant-permissions-that-implicitly-make-them-administrators...
Improper access control in the newsletter module (see GHSA-3r9g-pfhv-3228)
More info at https://contao.org/en/security-advisories/improper-access-control-in-the-newsletter-module...