Skip to content
RequestGuard Vulnerabilities
Pricing
Vulnerability intelligence Composer

symfony/security-core

Symfony Security Component - Core Library

Composer latest 8.1.6 MIT

Evidence path

Version, exploitation, severity

RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.

1

Latest version

8.1.6

No matching published advisory returned

2

Known exploitation

No KEV match

Checked by exact CVE identifier

3

Highest advisory severity

Critical

5 active advisories

Check an exact version

The registry confirms the version, then OSV checks advisories for that exact value.

Published records

Advisories

5
GHSA-35c5-28pg-2qg4 critical

Symfony Authentication Bypass

Affected range

ECOSYSTEM: introduced 2.8.0; fixed 2.8.37ECOSYSTEM: introduced 3.0.0; fixed 3.3.17ECOSYSTEM: introduced 3.4.0; fixed 3.4.7ECOSYSTEM: introduced 4.0.0; fixed 4.0.7>=2.8.0,<2.8.37|>=3.0.0,<3.1.0|>=3.1.0,<3.2.0|>=3.2.0,<3.3.0|>=3.3.0,<3.3.17|>=3.4.0,<3.4.7|>=4.0.0,<4.0.7

Fixed versions: 2.8.37, 3.3.17, 3.4.7, 4.0.7

CVE-2018-11407 Source ↗Source ↗
GHSA-wvj5-r78r-hhfq critical

Symfony Authentication Bypass

Affected range

ECOSYSTEM: introduced 2.8.0; fixed 2.8.6ECOSYSTEM: introduced 3.0.0; fixed 3.0.6>=2.8.0,<2.8.6|>=3.0.0,<3.0.6

Fixed versions: 2.8.6, 3.0.6

CVE-2016-2403 Source ↗Source ↗
GHSA-q87v-q8fw-gmj5 critical

Symfony Incorrect Access Control

Affected range

ECOSYSTEM: introduced 2.7.30; fixed 2.7.32ECOSYSTEM: introduced 2.8.23; fixed 2.8.25ECOSYSTEM: introduced 3.2.10; fixed 3.2.12ECOSYSTEM: introduced 3.3.3; fixed 3.3.5>=2.7.30,<2.7.32|>=2.8.23,<2.8.25|>=3.2.10,<3.2.12|>=3.3.3,<3.3.5

Fixed versions: 2.7.32, 2.8.25, 3.2.12, 3.3.5

CVE-2017-11365 Source ↗Source ↗
GHSA-jjx5-fq5g-8xpc high

Symfony Cryptographic Vulnerability

Affected range

ECOSYSTEM: introduced 2.4.0; fixed 2.6.13ECOSYSTEM: introduced 2.7.0; fixed 2.7.9>=2.4.0,<2.5.0|>=2.5.0,<2.6.0|>=2.6.0,<2.6.13|>=2.7.0,<2.7.9

Fixed versions: 2.6.13, 2.7.9

CVE-2016-1902 Source ↗Source ↗
GHSA-5pv8-ppvj-4h68 moderate

Prevent user enumeration using Guard or the new Authenticator-based Security

Affected range

ECOSYSTEM: introduced 2.8.0; fixed 3.4.48ECOSYSTEM: introduced 4.0.0; fixed 4.4.23ECOSYSTEM: introduced 5.0.0; fixed 5.2.8>=2.8.0,<3.0.0|>=3.0.0,<3.1.0|>=3.1.0,<3.2.0|>=3.2.0,<3.3.0|>=3.3.0,<3.4.0|>=3.4.0,<3.4.49|>=4.0.0,<4.1.0|>=4.1.0,<4.2.0|>=4.2.0,<4.3.0|>=4.3.0,<4.4.0|>=4.4.0,<4.4.24|>=5.0.0,<5.1.0|>=5.1.0,<5.2.0|>=5.2.0,<5.2.9

Fixed versions: 3.4.48, 4.4.23, 5.2.8

CVE-2021-21424 Source ↗Source ↗