Packagist/symfony/polyfill CVE-2013-5958: medium, EPSS 1.87%

Symfony Denial of Service Via Long Password Hashing

Action: Upgrade symfony/polyfill to 1.10.0 or later.

composer require symfony/polyfill:1.10.0

Affected

Fixed versions

Sources

• osv: GHSA-cr49-fx2v-9p57#Packagist/symfony/polyfill
• https://nvd.nist.gov/vuln/detail/CVE-2013-5958
• https://github.com/symfony/symfony/issues/11522
• https://github.com/symfony/polyfill/pull/155
• https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/polyfill/CVE-2013-5958.yaml
• https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security/CVE-2013-5958.yaml
• https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2013-5958.yaml
• https://github.com/symfony/symfony
• https://symfony.com/blog/security-releases-cve-2013-5958-symfony-2-0-25-2-1-13-2-2-9-and-2-3-6-released
• http://symfony.com/blog/security-releases-cve-2013-5958-symfony-2-0-25-2-1-13-2-2-9-and-2-3-6-released

CVE-2013-5958 · published 2022-05-17T04:19:02Z · modified 2024-12-08T05:28:14.866258Z · JSON