Login Request a demo
SY
Product
symfony
by symfony · last CVE Jul 14, 2026
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities31In the news0Timeline
Severity mix
Critical 3High 13Medium 15Low 0
Severity
All severities31Critical3High13Medium15Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add symfony to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-47767
9.8
1%
Jul 14
Symfony: SymfonyRuntime CVE-2024-50340 Patch Bypass: Web Requests Can Still Set APP_ENV/APP_DEBUG via parse_str/SAPI Argv Mismatch
Affected: >= 5.4.46, < 5.4.52; >= 6.4.14, < 6.4.40; >= 7.1.7, < 7.4.12; >= 8.0.0-BETA1, < 8.0.12
CVE-2026-45069
9.1
0%
Jul 14
Symfony: OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claims
Affected: >= 6.3.0, < 6.4.40; >= 7.4.0, < 7.4.12; >= 8.0.0-BETA1, < 8.0.12
CVE-2026-45063
9.1
0%
Jul 14
Symfony: Identity Spoofing via Unanchored DN Regex in X509Authenticator
Affected: < 5.4.52; >= 6.0.0-BETA1, < 6.4.40; >= 7.0.0-BETA1, < 7.4.12; >= 8.0.0-BETA1, < 8.0.12
Showing 3