Packagist/symfony/http-foundation: medium

Symfony2 security issue when the trust proxy mode is enabled

Action: Upgrade symfony/http-foundation to 2.0.19 or later.

composer require symfony/http-foundation:2.0.19

composer require symfony/http-foundation:2.1.4

Affected

Fixed versions

Sources

• osv: GHSA-vfm6-r2gc-pwww
• https://github.com/symfony/http-foundation/commit/5cde5229fc71a19cef2a0a933a18e08e43252f34
• https://github.com/symfony/http-foundation/commit/795ac45c188ee2a729db4513e9dfd30b16a0ed35
• https://github.com/symfony/symfony/commit/9ce892cf4395e73b136e9b5cd1fae9e91995c93b
• https://github.com/symfony/symfony/commit/e5536f0fe10421da7ebbe0071343e94d039dfb97
• https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-foundation/2012-11-29.yaml
• https://symfony.com/blog/security-release-symfony-2-0-19-and-2-1-4

published 2024-05-30T00:34:48Z · modified 2024-12-04T05:41:25.742334Z · JSON