Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 105
Reset filtersSymfony Open Redirect
Symfony Directory Traversal
Symfony Open Redirect
Symfony DoS
Symfony CSRF Token Fixation
Symfony Open Redirect
Symfony Path Disclosure
Symfony CSRF Vulnerability
Symfony HTTP Foundation web cache poisoning
Symfony Host Header Injection vulnerability in the HttpFoundation component
Symfony collectionCascaded and collectionCascadedDeeply fields security bypass
Symfony Http-Kernel has non-constant time comparison in UriSigner
CSRF token missing in Symfony
CSV Injection in symfony/serializer
Cookie persistence after password changes in symfony/security-bundle
Webcache Poisoning in symfony/http-kernel
Authentication granted to all firewalls instead of just one
User enumeration in authentication mechanisms
Prevent user enumeration using Guard or the new Authenticator-based Security
RCE in Symfony
Firewall configured with unanimous strategy was not actually unanimous in Symfony
Exceptions displayed in non-debug configurations in Symfony
Prevent cache poisoning via a Response Content-Type header in Symfony
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.