symfony ux

• CVE-2026-49215 Low 2.1 Symfony UX: CSRF Protection Bypass in symfony/ux-live-component — Accept Header is CORS-Safelisted 0.2%
• CVE-2026-49216 Medium 5.1 Symfony UX: XSS in symfony/ux-autocomplete via unescaped AJAX response data 0.3%
• CVE-2026-49211 Medium 6.9 Symfony UX: Information exposure via unescaped LIKE wildcards in EntitySearchUtil 0.5%
• CVE-2026-49208 Medium 6.9 Symfony UX: Format-less date LiveProps parsed with the permissive DateTime constructor 0.4%
• CVE-2026-49210 Low 2.3 Symfony UX: XSS in symfony/ux-live-component via attacker-controlled child component tag 0.3%
• CVE-2026-49212 Medium 6.9 Symfony UX: LiveComponentHydrator HMAC checksum lacks component and slot binding 0.2%
• CVE-2026-49209 Medium 5.3 Symfony UX: Denial of service in symfony/ux-live-component via unbounded batch action requests 0.6%
• CVE-2026-55877 Medium 6.1 Symfony UX: XSS in symfony/ux-icons via unsanitized SVG content in local files and Iconify on-demand responses 0.3%
• CVE-2026-55878 High 7.8 Symfony: Path Traversal in symfony/ux-toolkit Allows Arbitrary File Write and Read via Crafted Recipe Manifest 0.2%
• CVE-2025-47946 Medium 6.1 symfony/ux-live-component and symfony/ux-twig-component vulnerable to unsanitized HTML attribute injection via ComponentAttributes 0.3%