{"action":"Upgrade symfony/symfony to 5.3.12 or later.","affected":[{"fixed":"5.3.12","introduced":"5.2.0"}],"component":"symfony/symfony","cve_ids":["CVE-2021-41267"],"ecosystem":"Packagist","epss":0.0128,"exploited":false,"fixed_versions":["5.3.12"],"ghsa_id":"GHSA-q3j3-w37x-hq2q","id":"tcs_01M5KF6W0NK5CENT7DWCYR84CB","modified_at":"2026-07-08T06:28:30.044634543Z","published_at":"2021-11-24T20:04:25Z","references":["https://osv.dev/vulnerability/GHSA-q3j3-w37x-hq2q","https://github.com/symfony/symfony/security/advisories/GHSA-q3j3-w37x-hq2q","https://nvd.nist.gov/vuln/detail/CVE-2021-41267","https://github.com/symfony/symfony/pull/44243","https://github.com/symfony/symfony/commit/95dcf51682029e89450aee86267e3d553aa7c487","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-kernel/CVE-2021-41267.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2021-41267.yaml","https://github.com/symfony/symfony/releases/tag/v5.3.12","https://symfony.com/cve-2021-41267"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-q3j3-w37x-hq2q#Packagist/symfony/symfony","url":"https://osv.dev/vulnerability/GHSA-q3j3-w37x-hq2q"}],"summary":"Webcache Poisoning in symfony/http-kernel"}