sensiolabs symfony

• CVE-2026-121949 Medium 5.4 Symfony: HtmlSanitizer Does Not URL-Sanitize srcset and imagesrcset: Media Scheme and Host Allow-List Bypass 0.2%
• CVE-2026-118517 Medium 4.3 Symfony: HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URLs Without a Well-Formed Authority (Incomplete Fix for CVE-2026-45066) 0.3%
• CVE-2026-123125 Medium 6.5 Symfony: Ip Constraint public/private Modes Accept IPv4-Mapped and IPv4-Compatible IPv6 Addresses allowing SSRF Filter Bypass 0.2%
• CVE-2026-123119 Low 2.3 Symfony: NoPrivateNetworkHttpClient Does Not Pin the Checked IP of Cached Hosts, Letting DNS Rebinding Enumerate Internal Ports (Incomplete Fix for CVE-2024-50342) 0.2%
• CVE-2026-121971 High 8.2 Symfony: ScopingHttpClient Sends the Credentials of Its Default Scope to Other Origins Through Network-Path References 0.2%
• CVE-2026-121373 Medium 5.3 Symfony: HtmlSanitizer MetaRefreshAttributeSanitizer Matches Only a Narrow Subset of the Browser Refresh Grammar (Incomplete Fix for CVE-2026-48761) 0.5%
• CVE-2026-118516 Medium 6.3 Symfony: Host Placeholders Can Match the Start of the Path in Compiled URL Matchers, Bypassing Path-Based Access Control 0.4%
• CVE-2026-118513 High 7.7 Symfony: X.509 Authentication Impersonation via DN Value Injection (incomplete fix for CVE-2026-45063) 0.3%
• CVE-2026-109449 High 8.7 Symfony: Unbounded Nesting in the Expression Parser Lets Untrusted Expressions Crash the Process 0.4%
• CVE-2026-109413 High 8.7 Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process 0.4%
• CVE-2026-108082 High 8.7 Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header 0.5%