Skip to content
RequestGuard Vulnerabilities
Pricing
Vulnerability intelligence Composer

symfony/security-guard

Symfony Security Component - Guard

Composer latest 5.4.45 MIT

Evidence path

Version, exploitation, severity

RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.

1

Latest version

5.4.45

No matching published advisory returned

2

Known exploitation

No KEV match

Checked by exact CVE identifier

3

Highest advisory severity

Moderate

2 active advisories

Check an exact version

The registry confirms the version, then OSV checks advisories for that exact value.

Published records

Advisories

2
GHSA-5pv8-ppvj-4h68 moderate

Prevent user enumeration using Guard or the new Authenticator-based Security

Affected range

ECOSYSTEM: introduced 2.8.0; fixed 3.4.48ECOSYSTEM: introduced 4.0.0; fixed 4.4.23ECOSYSTEM: introduced 5.0.0; fixed 5.2.8>=2.8.0,<3.0.0|>=3.0.0,<3.1.0|>=3.1.0,<3.2.0|>=3.2.0,<3.3.0|>=3.3.0,<3.4.0|>=3.4.0,<3.4.48|>=4.0.0,<4.1.0|>=4.1.0,<4.2.0|>=4.2.0,<4.3.0|>=4.3.0,<4.4.0|>=4.4.0,<4.4.23|>=5.0.0,<5.1.0|>=5.1.0,<5.2.0|>=5.2.0,<5.2.8

Fixed versions: 3.4.48, 4.4.23, 5.2.8

CVE-2021-21424 Source ↗Source ↗
PKSA-hjzh-rs44-2jsh unknown

CVE-2018-11385: Session Fixation Issue for Guard Authentication

Affected range

>=2.8.0,<2.8.41|>=3.0.0,<3.1.0|>=3.1.0,<3.2.0|>=3.2.0,<3.3.0|>=3.3.0,<3.3.17|>=3.4.0,<3.4.11|>=4.0.0,<4.0.11
CVE-2018-11385 Source ↗