Skip to content
RequestGuard Vulnerabilities
Pricing
Vulnerability intelligence Composer

symfony/form

Allows to easily create, process and reuse HTML forms

Composer latest 8.1.7 MIT

Evidence path

Version, exploitation, severity

RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.

1

Latest version

8.1.7

No matching published advisory returned

2

Known exploitation

No KEV match

Checked by exact CVE identifier

3

Highest advisory severity

High

3 active advisories

Check an exact version

The registry confirms the version, then OSV checks advisories for that exact value.

Published records

Advisories

3
GHSA-g97c-jfx6-xvxh high

Symfony Vulnerable to Timing Attack

Affected range

ECOSYSTEM: introduced 2.3.0; fixed 2.3.35ECOSYSTEM: introduced 2.4.0; fixed 2.6.12ECOSYSTEM: introduced 2.7.0; fixed 2.7.7>=2.3.0,<2.3.35|>=2.4.0,<2.5.0|>=2.5.0,<2.6.0|>=2.6.0,<2.6.12|>=2.7.0,<2.7.7

Fixed versions: 2.3.35, 2.6.12, 2.7.7

CVE-2015-8125 Source ↗Source ↗
GHSA-cqqh-94r6-wjrg moderate

Symfony SSRF Vulnerability via Form Component

Affected range

ECOSYSTEM: introduced 2.7.0; fixed 2.7.38ECOSYSTEM: introduced 2.8.0; fixed 2.8.31ECOSYSTEM: introduced 3.0.0; fixed 3.2.14ECOSYSTEM: introduced 3.3.0; fixed 3.3.13>=2.7.0,<2.7.38|>=2.8.0,<2.8.31|>=3.0.0,<3.1.0|>=3.1.0,<3.2.0|>=3.2.0,<3.2.14|>=3.3.0,<3.3.13

Fixed versions: 2.7.38, 2.8.31, 3.2.14, 3.3.13

CVE-2017-16790 Source ↗Source ↗
GHSA-x3cf-w64x-4cp2 moderate

Symfony Path Disclosure

Affected range

ECOSYSTEM: introduced 2.7.0; fixed 2.7.50ECOSYSTEM: introduced 2.8.0; fixed 2.8.49ECOSYSTEM: introduced 3.0.0; fixed 3.4.20ECOSYSTEM: introduced 4.0.0; fixed 4.0.15ECOSYSTEM: introduced 4.1.0; fixed 4.1.9

Fixed versions: 2.7.50, 2.8.49, 3.4.20, 4.0.15, 4.1.9, 4.2.1

CVE-2018-19789 Source ↗Source ↗