Vulnerabilities in symfony
66 resultsCVE-2025-47946MEDIUMsymfony/ux-live-component and symfony/ux-twig-component vulnerable to unsanitized HTML attribute injection via ComponentAttributesEPSS 0.3%CVE-2026-48747MEDIUMSymfony: Mailomat Mailer Webhook Parser Reads the HMAC Algorithm from the Request: Signature Algorithm DowngradeEPSS 0.2%CVE-2026-49212MEDIUMSymfony UX: LiveComponentHydrator HMAC checksum lacks component and slot bindingEPSS 0.2%CVE-2026-24739MEDIUMSymfony has incorrect argument escaping under MSYS2/Git Bash on Windows that can lead to destructive file operationsEPSS 0.2%CVE-2026-55878HIGHSymfony: Path Traversal in symfony/ux-toolkit Allows Arbitrary File Write and Read via Crafted Recipe ManifestEPSS 0.2%CVE-2026-49215LOWSymfony UX: CSRF Protection Bypass in symfony/ux-live-component — Accept Header is CORS-SafelistedEPSS 0.2%