Debian/symfony: unknown
The Symfony Validator component IpValidator incompletely classifies internal addresses in the filtered modes of the Ip constraint, so some internal addresses are accepted as public, which can lead to
Action: Upgrade symfony to 7.4.23+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.4.23+dfsg-1 | - |
Fixed versions
| 7.4.23+dfsg-1 |
Sources
- osv: DEBIAN-CVE-2026-123125#Debian:14/symfony
- https://security-tracker.debian.org/tracker/CVE-2026-123125
published · modified · JSON