Product by Symfony

    Symfony UX

    10 known vulnerabilities in Symfony UX (Symfony), 0 of them actively exploited (CISA KEV).

    Key figures

    10

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Symfony UX (Symfony)
    HighCVE-2026-49211

    Symfony UX: Information exposure via unescaped LIKE wildcards in EntitySearchUtil

    		7.5
    MediumCVE-2026-49209

    Symfony UX: Denial of service in symfony/ux-live-component via unbounded batch action requests

    		6.5
    MediumCVE-2026-49208

    Symfony UX: Format-less date LiveProps parsed with the permissive DateTime constructor

    		5.3
    HighCVE-2026-49212

    Symfony UX: LiveComponentHydrator HMAC checksum lacks component and slot binding

    		7.5
    HighCVE-2026-55878

    symfony/ux-toolkit: Path Traversal Allows Arbitrary File Write and Read via Crafted Recipe Manifest

    		7.8
    MediumCVE-2026-49210

    Symfony UX: XSS in symfony/ux-live-component via attacker-controlled child component tag

    		6.1
    MediumCVE-2026-55877

    symfony/ux-icons: XSS via unsanitized SVG content in local files and Iconify on-demand responses

    		6.1
    MediumCVE-2026-49216

    Symfony UX: XSS in symfony/ux-autocomplete via unescaped AJAX response data

    		5.4
    MediumCVE-2026-49215

    Symfony UX: CSRF Protection Bypass in symfony/ux-live-component — Accept Header is CORS-Safelisted

    		5.4
    MediumCVE-2025-47946

    Symfony UX: Cross-site Scripting

    		6.1

    All products by Symfony