Skip to content
RequestGuard Vulnerabilities
Pricing
Vulnerability intelligence Composer

symfony/twig-bridge

Provides integration for Twig with various Symfony components

Composer latest 8.1.7 MIT

Evidence path

Version, exploitation, severity

RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.

1

Latest version

8.1.7

No matching published advisory returned

2

Known exploitation

No KEV match

Checked by exact CVE identifier

3

Highest advisory severity

Moderate

2 active advisories

Check an exact version

The registry confirms the version, then OSV checks advisories for that exact value.

Published records

Advisories

2
GHSA-q847-2q57-wmr3 moderate

Symfony potential Cross-site Scripting vulnerabilities in CodeExtension filters

Affected range

ECOSYSTEM: introduced 2.0.0; fixed 4.4.51ECOSYSTEM: introduced 5.0.0; fixed 5.4.31ECOSYSTEM: introduced 6.0.0; fixed 6.3.8>=2.0.0,<2.1.0|>=2.1.0,<2.2.0|>=2.2.0,<2.3.0|>=2.3.0,<2.4.0|>=2.4.0,<2.5.0|>=2.5.0,<2.6.0|>=2.6.0,<2.7.0|>=2.7.0,<2.8.0|>=2.8.0,<3.0.0|>=3.0.0,<3.1.0|>=3.1.0,<3.2.0|>=3.2.0,<3.3.0|>=3.3.0,<3.4.0|>=3.4.0,<4.0.0|>=4.0.0,<4.1.0|>=4.1.0,<4.2.0|>=4.2.0,<4.3.0|>=4.3.0,<4.4.0|>=4.4.0,<4.4.51|>=5.0.0,<5.1.0|>=5.1.0,<5.2.0|>=5.2.0,<5.3.0|>=5.3.0,<5.4.0|>=5.4.0,<5.4.31|>=6.0.0,<6.1.0|>=6.1.0,<6.2.0|>=6.2.0,<6.3.0|>=6.3.0,<6.3.8

Fixed versions: 4.4.51, 5.4.31, 6.3.8

CVE-2023-46734 Source ↗Source ↗
GHSA-hmr5-2xcr-v8pp low

Symfony Vulnerable to stored XSS in WebProfiler CodeExtension::fileExcerpt() — Unescaped Non-PHP File Rendering

Affected range

ECOSYSTEM: introduced 6.4.24; fixed 6.4.40>=6.4.24,<6.4.40

Fixed versions: 6.4.40

CVE-2026-45072 Source ↗Source ↗