Vulnerability intelligence Composer

symfony/twilio-notifier

Symfony Twilio Notifier Bridge

Composer latest 8.1.7 MIT

Evidence path

Version, exploitation, severity

RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.

Latest version

8.1.7

No matching published advisory returned

Known exploitation

No KEV match

Checked by exact CVE identifier

Highest advisory severity

Moderate

1 active advisory

Check an exact version

The registry confirms the version, then OSV checks advisories for that exact value.

Published records

Advisories

GHSA-55rj-x2vc-4whq moderate

Symfony: Twilio SMS Notifier allows unauthenticated webhook injection due to missing X-Twilio-Signature verification

Sep 10, 2026

Affected range

ECOSYSTEM: introduced 6.4.0; fixed 6.4.40ECOSYSTEM: introduced 7.0.0; fixed 7.4.12ECOSYSTEM: introduced 8.0.0; fixed 8.0.12>=6.4.0,<6.4.40|>=7.0.0,<7.1.0|>=7.1.0,<7.2.0|>=7.2.0,<7.3.0|>=7.3.0,<7.4.0|>=7.4.0,<7.4.12|>=8.0.0,<8.0.12

Fixed versions: 6.4.40, 7.4.12, 8.0.12

CVE-2026-47212 Source ↗Source ↗