CVE-2026-49208 MEDIUM 6.9 Ux — Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0 until 2.36.0 and 3.1.0, when a #[LiveProp] is typ… 2026-07-17 CVE-2026-49209 MEDIUM 5.3 Ux — Symfony UX is a JavaScript ecosystem for Symfony. From 2.5.0 until 2.36.0 and 3.1.0, Symfony\UX\LiveComponent\… 2026-07-17 CVE-2026-49210 LOW 2.3 Ux — Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0 until 2.36.0 and 3.1.0, Symfony\UX\LiveComponent\… 2026-07-17 CVE-2026-49211 MEDIUM 6.9 Ux — Symfony UX is a JavaScript ecosystem for Symfony. From 2.2.0 until 2.36.0 and 3.1.0, Symfony\UX\Autocomplete\D… 2026-07-17 CVE-2026-49212 MEDIUM 6.9 Ux — Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0 until 2.36.0 and 3.1.0, the HMAC computed by Symf… 2026-07-17 CVE-2026-49215 LOW 2.1 Ux — Symfony UX is a JavaScript ecosystem for Symfony. From 2.22.0 until 2.36.0 and 3.1.0, Symfony\UX\LiveComponent… 2026-07-17 CVE-2026-49216 MEDIUM 5.1 Ux — Symfony UX is a JavaScript ecosystem for Symfony. From 2.2.0 until 2.36.0 and 3.1.0, the Stimulus controller i… 2026-07-17 CVE-2026-45063 CRITICAL 9.1 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4… 2026-07-14 CVE-2026-45064 LOW 2.3 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0-B… 2026-07-14 CVE-2026-45065 LOW 2.3 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4… 2026-07-14 CVE-2026-45066 LOW 2.3 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0-B… 2026-07-14 CVE-2026-45067 MEDIUM 6.3 Symfony — ### Description `Symfony\Component\Mime\Address` is the value-object every Symfony Mailer address (to/cc/bcc/… 2026-07-14 CVE-2026-45068 HIGH 8.7 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4… 2026-07-14 CVE-2026-45069 HIGH 8.8 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4… 2026-07-14 CVE-2026-45070 MEDIUM 6.3 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4… 2026-07-14 CVE-2026-45071 HIGH 8.7 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4… 2026-07-14 CVE-2026-45072 LOW 2 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.4.24 … 2026-07-14 CVE-2026-45073 MEDIUM 6.3 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4… 2026-07-14 CVE-2026-45074 HIGH 7.6 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 7.1.0 u… 2026-07-14 CVE-2026-45075 HIGH 8.3 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4… 2026-07-14 CVE-2026-45077 HIGH 8.3 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4… 2026-07-14 CVE-2026-45133 HIGH 8.2 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4… 2026-07-14 CVE-2026-45304 HIGH 8.7 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4… 2026-07-14 CVE-2026-45305 HIGH 8.7 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4… 2026-07-14 CVE-2026-45753 LOW 2.1 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0-B… 2026-07-14 CVE-2026-45754 MEDIUM 6.9 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4… 2026-07-14 CVE-2026-45755 MEDIUM 6.9 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4… 2026-07-14 CVE-2026-45756 HIGH 8.2 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 7.3.0-B… 2026-07-14 CVE-2026-46627 HIGH 7.1 Twig — Twig is a template language for PHP. Prior to 3.26.0, the Twig sandbox does not prevent a template from consum… 2026-07-14 CVE-2026-46628 MEDIUM 5.1 Twig — Twig is a template language for PHP. Prior to 3.26.0, the deprecated spaceless filter is registered as safe fo…● PoC 2026-07-14 CVE-2026-46629 MEDIUM 5.3 Twig — Twig is a template language for PHP. Prior to 3.26.0, twig/intl-extra memoises IntlDateFormatter and NumberFor… 2026-07-14 CVE-2026-46633 HIGH 8.7 Twig — Twig is a template language for PHP. Prior to 3.26.0, Compiler::string() does not escape single quotes when a … 2026-07-14 CVE-2026-46634 HIGH 7.7 Twig — Twig is a template language for PHP. From 3.9.0 until 3.26.0, template_from_string() compiles an inner templat… 2026-07-14 CVE-2026-46635 MEDIUM 5.3 Twig — Twig is a template language for PHP. Prior to 3.26.0, the column filter passes object arrays to PHP array_colu… 2026-07-14 CVE-2026-46637 MEDIUM 5.1 Twig — Twig is a template language for PHP. Prior to 3.26.0, several filters in twig/markdown-extra and twig/cssinlin… 2026-07-14 CVE-2026-46638 MEDIUM 6 Twig — Twig is a template language for PHP. Prior to 3.26.0, {% sandbox %}{% include %} can include a template that w… 2026-07-14 CVE-2026-46639 HIGH 7.1 Twig — Twig is a template language for PHP. From 3.24.0 until 3.26.0, object-destructuring assignment compiles CoreEx… 2026-07-14 CVE-2026-46640 HIGH 8.7 Twig — Twig is a template language for PHP. From 3.15.0 until 3.26.0, _self.(<string>) and import-alias dynamic attri… 2026-07-14 CVE-2026-46644 MEDIUM 6.9 Polyfill — Symfony Polyfill backports PHP features and provides compatibility layers for extensions and functions. From 1… 2026-07-14 CVE-2026-47212 MEDIUM 6.9 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4… 2026-07-14 CVE-2026-47730 MEDIUM 5.1 Twig — Twig is a template language for PHP. From 3.0.0 until 3.26.0, Twig\Profiler\Dumper\HtmlDumper writes Profile::… 2026-07-14 CVE-2026-47732 HIGH 7.1 Twig — Twig is a template language for PHP. Prior to 3.26.0, several Twig language constructs trigger PHP string coer… 2026-07-14 CVE-2026-47767 HIGH 8.3 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 5.4.46 … 2026-07-14 CVE-2026-48489 HIGH 8.7 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4… 2026-07-14 CVE-2026-48736 MEDIUM 6.9 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 5.4.0 t… 2026-07-14 CVE-2026-48747 MEDIUM 6.3 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4… 2026-07-14 CVE-2026-48760 MEDIUM 5.3 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0 u… 2026-07-14 CVE-2026-48761 MEDIUM 5.3 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0 u… 2026-07-14 CVE-2026-48784 MEDIUM 5.1 Symfony — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4… 2026-07-14 CVE-2026-48805 MEDIUM 5.3 Twig — Twig is a template language for PHP. Prior to 3.27.0, deprecated internal wrappers in src/Resources/core.php d… 2026-07-14 CVE-2026-48806 HIGH 7.1 Twig — Twig is a template language for PHP. Prior to 3.27.0, ArrayExpression does not guard dynamic mapping keys that… 2026-07-14 CVE-2026-48807 HIGH 7.1 Twig — Twig is a template language for PHP. Prior to 3.27.0, the sandbox __toString() checks do not fully cover Trave… 2026-07-14 CVE-2026-48808 MEDIUM 6 Twig — Twig is a template language for PHP. Prior to 3.27.0, the column filter passes the active sandbox state as a b… 2026-07-14 CVE-2026-49981 MEDIUM 6 Twig — Twig is a template language for PHP. Prior to 3.27.0, the per-template filter, tag, and function allow-list ve… 2026-07-14 CVE-2026-55877 MEDIUM 6.1 Ux — Symfony UX is a JavaScript ecosystem for Symfony. From 2.17.0 before 2.36.1 and from 3.0.0 before 3.2.0, the u… 2026-07-08 CVE-2026-55878 HIGH 7.8 Ux — Symfony UX is a JavaScript ecosystem for Symfony. From 2.32.0 before 2.36.1 and from 3.0.0 before 3.2.0, the u… 2026-07-08