Packagist/symfony/serializer: critical 9.8

Symfony XML decoding attack vector through external entities

Action: Upgrade symfony/serializer to 2.0.11 or later.

composer require symfony/serializer:2.0.11

Affected

Fixed versions

Sources

• osv: GHSA-j68w-pg49-f6vx
• https://github.com/symfony/serializer/commit/0943a06a663b573d7319fc1acd56d3484eaaa430
• https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/serializer/2012-02-24.yaml
• https://github.com/symfony/serializer
• https://symfony.com/blog/security-release-symfony-2-0-11-released

published 2024-05-30T00:52:20Z · modified 2024-12-04T05:48:43.956460Z · JSON