WE
Product
web-profiler-bundle
by symfony · last CVE Jul 14, 2026
1
CVEs
0
On KEV
5.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch

Add web-profiler-bundle to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-45072
5.4
0%
Jul 14
Symfony: Stored XSS in WebProfiler CodeExtension::fileExcerpt() — Unescaped Non-PHP File Rendering
Affected: >= 7.2.9, < 7.4.12; >= 8.0.0-BETA1, < 8.0.12
Showing 1