Sensiolabs Symfony vulnerabilities
89 published vulnerabilities in Sensiolabs Symfony. The most were published in 2026 (29), and 29 so far in 2026.
Sensiolabs Symfony vulnerabilities by year
2012
2013
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Sensiolabs Symfony vulnerabilities
- CVE-2019-11325 Improper Input Validation in Symfony
- CVE-2019-18889 Symfony Unsafe Cache Serialization Could Enable RCE
- CVE-2017-11365 Symfony Incorrect Access Control
- CVE-2019-10910 Symfony Service IDs Allow Injection
- CVE-2019-10913 Invalid HTTP method overrides allow possible XSS or other attacks in Symfony
- CVE-2018-11407 Symfony Authentication Bypass
- CVE-2016-2403 Symfony Authentication Bypass
- CVE-2026-45063 Symfony: Identity Spoofing via Unanchored DN Regex in X509Authenticator
- CVE-2026-45069 Symfony: OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claims
- CVE-2018-11406 Symfony CSRF Token Fixation
- CVE-2026-45068 Symfony: Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
- CVE-2026-45071 Symfony: XXE (Local File Disclosure) in DomCrawler::addXmlContent() via validateOnParse = true
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.