Packagist/symfony/symfony: critical 9.8

Symfony XML decoding attack vector through external entities

Action: Upgrade symfony/symfony to 2.0.11 or later.

composer require symfony/symfony:2.0.11

Affected

Fixed versions

Sources

• osv: GHSA-mmcv-fvq8-r9x3
• https://github.com/symfony/symfony/commit/3e64d36cbdc34acaa82e0e6318112cd2eacb6fec
• https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/2012-02-24.yaml
• https://github.com/symfony/symfony
• https://symfony.com/blog/security-release-symfony-2-0-11-released

published 2024-05-30T12:17:20Z · modified 2024-12-05T05:43:51.359420Z · JSON