tocsin

CVE-2024-50343

2 advisories.

Packagist/symfony/symfony CVE-2024-50343: low 3.1, EPSS 0.46%

Symfony has an incorrect response from Validator when input ends with `\n`

Action: Upgrade symfony/symfony to 5.4.43 or later.

composer require symfony/symfony:5.4.43
composer require symfony/symfony:6.4.11
composer require symfony/symfony:7.1.4

Affected

introducedfixedlast affected
05.4.43-
6.0.06.4.11-
7.0.07.1.4-

Fixed versions

5.4.436.4.117.1.4

Sources

CVE-2024-50343 · published · modified · JSON

Packagist/symfony/validator CVE-2024-50343: low 3.1, EPSS 0.46%

Symfony has an incorrect response from Validator when input ends with `\n`

Action: Upgrade symfony/validator to 5.4.43 or later.

composer require symfony/validator:5.4.43
composer require symfony/validator:6.4.11
composer require symfony/validator:7.1.4

Affected

introducedfixedlast affected
05.4.43-
6.0.06.4.11-
7.0.07.1.4-

Fixed versions

5.4.436.4.117.1.4

Sources

CVE-2024-50343 · published · modified · JSON