Debian/symfony: unknown
In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth. An expression made of
Action: Upgrade symfony to 7.4.21+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.4.21+dfsg-1 | - |
Fixed versions
| 7.4.21+dfsg-1 |
Sources
- osv: DEBIAN-CVE-2026-109449#Debian:14/symfony
- https://security-tracker.debian.org/tracker/CVE-2026-109449
published · modified · JSON