GHSA-w4rc-rx25-8m86 critical
Improper Input Validation in Symfony
Affected range
ECOSYSTEM: introduced 4.2.0; fixed 4.2.12ECOSYSTEM: introduced 4.3.0; fixed 4.3.8>=4.2.0,<4.2.12|>=4.3.0,<4.3.8Fixed versions: 4.2.12, 4.3.8
Vulnerability intelligence Composer
symfony/var-exporter
Provides tools to export, instantiate, hydrate, clone and lazy-load PHP objects
Composer latest 8.1.6 MIT
Evidence path
Version, exploitation, severity
RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.
1
Latest version
8.1.6
No matching published advisory returned
2
Known exploitation
No KEV match
Checked by exact CVE identifier
3
Highest advisory severity
Critical
1 active advisory
Check an exact version
The registry confirms the version, then OSV checks advisories for that exact value.
Published records