Skip to content
iPatch
Search CVEs, vendors, products
/
Log in
Start free
Today
Exploited tracker
Weekly brief
Vendors
How it works
Trust
Pricing
Vendors
/
symfony
/
routing
symfony routing
CVE-2026-48784
Medium
5.1
Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization
0.3%