Product by Sensiolabs
SensioLabs Symfony
93 known vulnerabilities in SensioLabs Symfony (Sensiolabs), 0 of them actively exploited (CISA KEV).
Key figures
93
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
11
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2019-18889 | SensioLabs Symfony: Code Injection | 9.8 | |
| Critical | CVE-2019-10910 | SensioLabs Symfony: SQL Injection | 9.8 | |
| Critical | CVE-2016-2403 | SensioLabs Symfony: Authentication Bypass | 9.8 | |
| Critical | CVE-2019-11325 | SensioLabs Symfony: security vulnerability | 9.8 | |
| Medium | CVE-2018-14773 | SensioLabs Symfony: security vulnerability | 6.5 | |
| Critical | CVE-2018-11407 | SensioLabs Symfony: Authentication Bypass | 9.8 | |
| High | CVE-2020-15094 | RCE in Symfony | 8.0 | |
| Medium | CVE-2017-18343 | SensioLabs Symfony: Cross-Site Scripting (XSS) | 6.1 | |
| Critical | CVE-2019-10913 | SensioLabs Symfony: SQL Injection | 9.8 | |
| Medium | CVE-2026-47212 | Symfony: Missing Authentication for Critical Function | 5.3 | |
| Critical | CVE-2017-11365 | SensioLabs Symfony: Improper Access Control | 9.8 | |
| High | CVE-2022-24894 | Symfony storing cookie headers in HttpCache | 5.9 | |
| High | CVE-2017-16654 | SensioLabs Symfony: Path Traversal | 7.5 | |
| Critical | CVE-2026-47767 | Symfony: Interpretation Conflict | 9.8 | |
| High | CVE-2019-18888 | SensioLabs Symfony: security vulnerability | 7.5 | |
| High | CVE-2018-11385 | SensioLabs Symfony: Session Fixation | 8.1 | |
| High | CVE-2025-64500 | Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass | 7.3 | |
| High | CVE-2019-10912 | SensioLabs Symfony: security vulnerability | 7.1 | |
| Medium | CVE-2018-19789 | SensioLabs Symfony: File Inclusion | 5.3 | |
| High | CVE-2016-1902 | SensioLabs Symfony: security vulnerability | 7.5 | |
| High | CVE-2016-4423 | SensioLabs Symfony: Denial of Service | 7.5 | |
| High | CVE-2026-108082 | Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header | — | |
| High | CVE-2026-45305 | Symfony: YAML Parser ReDoS via Catastrophic Backtracking in Parser::cleanup() Regex | 7.5 | |
| High | CVE-2026-45304 | Symfony: XML Entity Expansion | 7.5 | |
| Medium | CVE-2013-4752 | SensioLabs Symfony: security vulnerability | 6.1 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 28sans-atrisk-mail,