Packagist/symfony/dependency-injection: high 7.5

Symfony XML Entity Expansion security vulnerability

Action: Upgrade symfony/dependency-injection to 2.0.17 or later.

composer require symfony/dependency-injection:2.0.17

Affected

Fixed versions

Sources

• osv: GHSA-c636-cg5r-2498
• https://github.com/symfony/dependency-injection/commit/5c5040c890a8e4085dcd6fa3827f574ab5f71f4c
• https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/dependency-injection/2012-08-28.yaml
• https://github.com/symfony/dependency-injection
• https://symfony.com/blog/security-release-symfony-2-0-17-released

published 2024-05-29T19:59:13Z · modified 2024-12-04T05:40:08.123855Z · JSON