sensiolabs symfony
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-109449 | < v5.4.54 ; v6.0.0-BETA1 – < v6.4.48 ; v7.0.0-BETA1 – < v7.4.21 ; … | Symfony: Unbounded Nesting in the Expression Parser Lets Untrusted Expressions Crash the Process | HIGH 8.7 | 0.4 % | ||
| CVE-2026-109413 | < v5.4.54 ; v6.0.0-BETA1 – < v6.4.45 ; v7.0.0-BETA1 – < v7.4.18 ; … | Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process | HIGH 8.7 | 0.4 % | ||
| CVE-2026-108082 | v4.1.0-BETA1 – < v5.4.54 ; v6.0.0-BETA1 – < v6.4.46 ; v7.0.0-BETA1 – < v7.4.19 ; … | Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header | HIGH 8.7 | 0.5 % |