Known Vulnerabilities for products from Symfony
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Symfony".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-57232 json | Not Provided | 2026-07-31 | 2026-08-03 | |
| CVE-2026-55878 json | Not Provided | 2026-07-08 | 2026-07-09 | |
| CVE-2026-55877 json | Not Provided | 2026-07-08 | 2026-07-09 | |
| CVE-2026-55824 json | Not Provided | 2026-07-31 | 2026-07-31 | |
| CVE-2026-54164 json | Not Provided | 2026-07-01 | 2026-07-02 | |
| CVE-2026-49981 json | Twig is a template language for PHP. Prior to 3.27.0, the per-template filter, tag, and function allow-list verdict is comput... | Not Provided | 2026-07-14 | 2026-07-21 |
| CVE-2026-49260 json | Not Provided | 2026-06-19 | 2026-06-22 | |
| CVE-2026-49216 json | Symfony UX is a JavaScript ecosystem for Symfony. From 2.2.0 until 2.36.0 and 3.1.0, the Stimulus controller in symfony/ux-au... | Not Provided | 2026-07-17 | 2026-07-21 |
| CVE-2026-49215 json | Not Provided | 2026-07-17 | 2026-07-17 | |
| CVE-2026-49212 json | Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0 until 2.36.0 and 3.1.0, the HMAC computed by Symfony\UX\LiveComp... | Not Provided | 2026-07-17 | 2026-07-20 |
| CVE-2026-49211 json | Symfony UX is a JavaScript ecosystem for Symfony. From 2.2.0 until 2.36.0 and 3.1.0, Symfony\UX\Autocomplete\Doctrine\EntityS... | Not Provided | 2026-07-17 | 2026-07-20 |
| CVE-2026-49210 json | Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0 until 2.36.0 and 3.1.0, Symfony\UX\LiveComponent\Util\ChildCompo... | Not Provided | 2026-07-17 | 2026-07-20 |
| CVE-2026-49209 json | Symfony UX is a JavaScript ecosystem for Symfony. From 2.5.0 until 2.36.0 and 3.1.0, Symfony\UX\LiveComponent\Controller\Batc... | Not Provided | 2026-07-17 | 2026-07-20 |
| CVE-2026-49208 json | Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0 until 2.36.0 and 3.1.0, when a #[LiveProp] is typed as DateTimeI... | Not Provided | 2026-07-17 | 2026-07-21 |
| CVE-2026-48808 json | Twig is a template language for PHP. Prior to 3.27.0, the column filter passes the active sandbox state as a boolean but does... | Not Provided | 2026-07-14 | 2026-07-17 |
| CVE-2026-48807 json | Twig is a template language for PHP. Prior to 3.27.0, the sandbox __toString() checks do not fully cover Traversable values p... | Not Provided | 2026-07-14 | 2026-07-17 |
| CVE-2026-48806 json | Twig is a template language for PHP. Prior to 3.27.0, ArrayExpression does not guard dynamic mapping keys that are coerced to... | Not Provided | 2026-07-14 | 2026-07-17 |
| CVE-2026-48805 json | Twig is a template language for PHP. Prior to 3.27.0, deprecated internal wrappers in src/Resources/core.php do not forward t... | Not Provided | 2026-07-14 | 2026-07-17 |
| CVE-2026-47732 json | Twig is a template language for PHP. Prior to 3.26.0, several Twig language constructs trigger PHP string coercion on a Strin... | Not Provided | 2026-07-14 | 2026-07-16 |
| CVE-2026-47730 json | Twig is a template language for PHP. From 3.0.0 until 3.26.0, Twig\Profiler\Dumper\HtmlDumper writes Profile::getTemplate() a... | Not Provided | 2026-07-14 | 2026-07-21 |
Known software with vulnerabilities from Symfony
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Symfony | Twig | 0.9.0 |