Login Request a demo
SY
Product
symfony
by symfony · last CVE Jul 14, 2026
39
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities39In the news0Timeline
Severity mix
Critical 4High 16Medium 17Low 2
Severity
All severities39Critical4High16Medium17Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add symfony to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-47767
9.8
1%
Jul 14
Symfony: SymfonyRuntime CVE-2024-50340 Patch Bypass: Web Requests Can Still Set APP_ENV/APP_DEBUG via parse_str/SAPI Argv Mismatch
Affected: >= 5.4.46, < 5.4.52; >= 6.4.14, < 6.4.40; >= 7.1.7, < 7.4.12; >= 8.0.0-BETA1, < 8.0.12
CVE-2024-51736
9.8
0%
Nov 6
Command execution hijack on Windows with Process class in symfony/process
Affected: < 5.4.46; >= 6.0.0, < 6.4.14; >= 7.0.0, < 7.1.7
CVE-2026-45069
9.1
0%
Jul 14
Symfony: OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claims
Affected: >= 6.3.0, < 6.4.40; >= 7.4.0, < 7.4.12; >= 8.0.0-BETA1, < 8.0.12
CVE-2026-45063
9.1
0%
Jul 14
Symfony: Identity Spoofing via Unanchored DN Regex in X509Authenticator
Affected: < 5.4.52; >= 6.0.0-BETA1, < 6.4.40; >= 7.0.0-BETA1, < 7.4.12; >= 8.0.0-BETA1, < 8.0.12
Showing 4