`symfony/http-foundation`

Ecosystem:
packagist

Package URL:
pkg:composer/symfony/http-foundation

Total PRs:
402 Dependabot PRs

Latest PR:
about 4 hours ago

Unique Repositories:
286 repositories

Unique Repos (30 days):
86 repositories

Security Advisories

Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass

GHSA-3rg7-wf37-54rm CVE-2025-64500 HIGH published 13 days ago • updated 3 days ago

### Description The `Request` class improperly interprets some `PATH_INFO` in a way that leads to representing some URLs with a path that doesn't ...

View all 11 advisories

Recent PRs

RSS Feed

chore(deps): bump symfony/http-foundation from 7.3.4 to 7.3.7 in the composer group across 1 directory

maicol07/oidc-client-php #4

7.3.4 → 7.3.7 Patch PR

Open about 4 hours ago 2 comments

chore(deps): bump the symfony group across 1 directory with 10 updates

AryanKumar1401/openemr-ts #47

6.4.23 → 6.4.29 Patch PR

Open 1 day ago 1 comment

Bump symfony/http-foundation from 6.4.23 to 6.4.29 in /webapp

DOMjudge/domjudge #3211

6.4.23 → 6.4.29 Patch PR

Open 2 days ago 1 comment

Bump symfony/http-foundation from 7.3.5 to 7.3.7

larsmw/CaRMen #4

7.3.5 → 7.3.7 Patch PR

Closed 3 days ago 1 comment

chore(deps): bump symfony/http-foundation from 7.3.2 to 7.3.7

cierrateam/cierra-adk #1

7.3.2 → 7.3.7 Patch PR

Open 3 days ago 1 comment

Bump symfony/http-foundation from 2.7.0 to 5.4.50

sharey/simple-php-website #7

2.7.0 → 5.4.50 Major PR

Open 11 days ago 1 comment

build(deps): bump symfony/http-foundation from 7.3.4 to 7.3.7 in the composer group across 1 directory

AKJUS/lmms.io #19

7.3.4 → 7.3.7 Patch PR

Open 12 days ago 1 comment

Bump symfony/http-foundation from 6.4.26 to 6.4.29 in /html

isobar-playground/base #437

6.4.26 → 6.4.29 Patch PR

Closed 12 days ago 2 comments

chore(deps): bump symfony/http-foundation from 7.3.1 to 7.3.7

aminnausin/mediaServer #182

7.3.1 → 7.3.7 Patch PR

Closed 12 days ago 1 comment

Bump symfony/http-foundation from 7.2.5 to 7.3.7

handikatriarlan/codepolitan-blog #7

7.2.5 → 7.3.7 Minor PR

Closed 12 days ago 1 comment

chore(deps): bump symfony/http-foundation from 7.2.6 to 7.3.7

handikatriarlan/sistem-informasi-pendataan-alumni-be #7

7.2.6 → 7.3.7 Minor PR

Closed 12 days ago 1 comment

(chore): Bump symfony/http-foundation from 6.4.23 to 6.4.29

yardinternet/skeleton-package #68

6.4.23 → 6.4.29 Patch PR

Closed 12 days ago 4 comments

(chore): Bump symfony/http-foundation from 6.4.28 to 6.4.29

yardinternet/wp-user-roles #73

6.4.28 → 6.4.29 Patch PR

Closed 13 days ago 4 comments

Bump symfony/http-foundation from 3.2.7 to 3.4.47

jonyen/bible-translation #8

3.2.7 → 3.4.47 Minor PR

Closed 13 days ago 1 comment

Bump symfony/http-foundation from 6.4.26 to 6.4.29 in the composer group across 1 directory

department-of-veterans-affairs/va.gov-cms #22734

6.4.26 → 6.4.29 Patch PR

Open 13 days ago 3 comments

Bump symfony/http-foundation from 6.4.26 to 6.4.29

Liturgical-Calendar/LiturgicalCalendarAPI #392

6.4.26 → 6.4.29 Patch PR

Open 13 days ago 1 comment

build(deps): bump symfony/http-foundation from 5.4.48 to 5.4.50

myparcelnl/prestashop #418

5.4.48 → 5.4.50 Patch PR

Open 13 days ago 2 comments

chore: bump symfony/http-foundation from 5.4.48 to 5.4.50

pressbooks/pressbooks #4277

5.4.48 → 5.4.50 Patch PR

Open 13 days ago 1 comment

Bump symfony/http-foundation from 5.4.48 to 5.4.50

anodyne/nova #312

5.4.48 → 5.4.50 Patch PR

Closed 13 days ago 1 comment

chore(deps): bump symfony/http-foundation from 7.3.6 to 7.3.7 in the composer group across 1 directory

SecPal/api #154

7.3.6 → 7.3.7 Patch PR

Open 13 days ago 7 comments

build(deps): bump symfony/http-foundation from 7.3.6 to 7.3.7

guanguans/favorite-link #348

7.3.6 → 7.3.7 Patch PR

Closed 13 days ago 1 comment

Bump symfony/http-foundation from 5.4.3 to 5.4.50 in /php-lumen

contributte/vercel-examples #175

5.4.3 → 5.4.50 Patch PR

Open 13 days ago 1 comment

Build(deps): Bump symfony/http-foundation from 7.3.6 to 7.3.7

THM-Health/PILOS #2606

7.3.6 → 7.3.7 Patch PR

Open 13 days ago 2 comments

Bump symfony/http-foundation from 7.3.6 to 7.3.7

128na/simutrans-portal #413

7.3.6 → 7.3.7 Patch PR

Closed 13 days ago 1 comment

chore(deps): bump symfony/http-foundation from 7.3.6 to 7.3.7

LycheeOrg/Lychee #3801

7.3.6 → 7.3.7 Patch PR

Open 13 days ago 1 comment

Bump symfony/http-foundation from 7.3.5 to 7.3.7 in /api

GCTC-NTGC/gc-digital-talent #15067

7.3.5 → 7.3.7 Patch PR

Closed 13 days ago 1 comment

chore(deps): bump symfony/http-foundation from 5.4.28 to 5.4.50

ahxar/laravel-8-jetstream-crud #172

5.4.28 → 5.4.50 Patch PR

Open 13 days ago 1 comment

Bump symfony/http-foundation from 7.3.6 to 7.3.7 in /backend in the composer group across 1 directory

MythicalLTD/FeatherPanel #82

7.3.6 → 7.3.7 Patch PR

Open 13 days ago 1 comment

Bump symfony/http-foundation from 7.3.5 to 7.3.7

firefly-iii/data-importer #1040

7.3.5 → 7.3.7 Patch PR

Open 13 days ago 1 comment

Bump symfony/http-foundation from 7.3.6 to 7.3.7

AkibaAT/fvn.li #165

7.3.6 → 7.3.7 Patch PR

Open 13 days ago 2 comments

chore(deps): bump symfony/http-foundation from 7.3.5 to 7.3.7

UN-OCHA/unocha-site #709

7.3.5 → 7.3.7 Patch PR

Closed 13 days ago 4 comments

Bump symfony/http-foundation from 7.3.5 to 7.3.7

developeregrem/fewohbee #125

7.3.5 → 7.3.7 Patch PR

Closed 13 days ago 1 comment

chore(deps): bump symfony/http-foundation from 7.3.5 to 7.3.7 in the composer group across 1 directory

dfo-osdt/osp #1257

7.3.5 → 7.3.7 Patch PR

Closed 13 days ago 1 comment

fix(deps): bump symfony/http-foundation from 7.3.6 to 7.3.7 in /app

lostfocus/geovault #84

7.3.6 → 7.3.7 Patch PR

Closed 13 days ago 2 comments

chore(deps): bump symfony/http-foundation from 7.3.4 to 7.3.7

umaarov/goat-dev #89

7.3.4 → 7.3.7 Patch PR

Open 13 days ago 3 comments

Bump symfony/http-foundation from 7.3.6 to 7.3.7 in the composer group across 1 directory

ericsizemore/phpunit-coverage-check #438

7.3.6 → 7.3.7 Patch PR

Open 13 days ago 4 comments

Bump symfony/http-foundation from 7.3.4 to 7.3.7

scify/Crowdsourcing-Platform #313

7.3.4 → 7.3.7 Patch PR

Open 13 days ago 2 comments

Bump symfony/http-foundation from 7.3.3 to 7.3.7

vipankumar87/laravel-crypto #3

7.3.3 → 7.3.7 Patch PR

Open 13 days ago 1 comment

chore(deps): bump symfony/http-foundation from 7.3.4 to 7.3.7 in /apps/laravel-app

ttomobile/project-template #16

7.3.4 → 7.3.7 Patch PR

Open 13 days ago 2 comments

Bump symfony/http-foundation from 7.3.3 to 7.3.7 in the composer group across 1 directory

Shaz3e/Laravel-Dev-Kit #171

7.3.3 → 7.3.7 Patch PR

Open 13 days ago 1 comment

Bump symfony/http-foundation from 7.3.3 to 7.3.7 in the composer group across 1 directory

scify/Talk-And-Play-Marketplace #42

7.3.3 → 7.3.7 Patch PR

Open 13 days ago 2 comments

Bump symfony/http-foundation from 7.3.2 to 7.3.7

aicwebtech/biblesupersearch_api #31

7.3.2 → 7.3.7 Patch PR

Closed 13 days ago 1 comment

Bump symfony/http-foundation from 7.3.2 to 7.3.7 in /src

bmlt-enabled/bmlt-server #1370

7.3.2 → 7.3.7 Patch PR

Closed 13 days ago 1 comment

Bump symfony/http-foundation from 7.3.3 to 7.3.7 in /tools/psalm

nbgrp/auditor #410

7.3.3 → 7.3.7 Patch PR

Closed 13 days ago 1 comment

Bump symfony/http-foundation from 7.3.2 to 7.3.7

christiancable/nexus5ive #608

7.3.2 → 7.3.7 Patch PR

Closed 13 days ago 3 comments

Bump symfony/http-foundation from 7.3.2 to 7.3.7

package-wizard/installer #229

7.3.2 → 7.3.7 Patch PR

Open 13 days ago 3 comments

Bump symfony/http-foundation from 7.3.4 to 7.3.7

assoconnect/absolute-percent-value-bundle #11

7.3.4 → 7.3.7 Patch PR

Closed 13 days ago 1 comment

Bump symfony/http-foundation from 7.3.3 to 7.3.7

NoonDaySun-Programming-Pty-Ltd/timeline #11

7.3.3 → 7.3.7 Patch PR

Closed 13 days ago 2 comments

Bump symfony/http-foundation from 7.3.2 to 7.3.7 in the composer group across 1 directory

ejts29/TechSolutions-Laravel-MVC-CRUD #1

7.3.2 → 7.3.7 Patch PR

Closed 13 days ago 1 comment

Bump symfony/http-foundation from 7.3.1 to 7.3.7

DexlerNG/cachet #2

7.3.1 → 7.3.7 Patch PR

Open 13 days ago 1 comment

Package Details

Name:	`symfony/http-foundation`
Ecosystem:	packagist
PURL Type:	composer
Package URL:	`pkg:composer/symfony/http-foundation`
JSON API:	View JSON

Security Advisories

11

Active advisories

CRITICAL 1

HIGH 3

MODERATE 5

LOW 2

View All composer Advisories

Package Information

Description:

Defines an object-oriented layer for the HTTP specification

Repository:	https://github.com/symfony/http-foundation
Homepage:	https://symfony.com
Latest Release:	`v7.3.0` 7 months ago
Dependent Repos:	533,200
Dependent Packages:	4,613
Downloads:	747,469,299
Ranking:	Top 0.0056% by dependent repos Top 0.0068% by downloads Top 0.0081% by dependent pkgs

PR Status

Open 175 (43.9%)

Merged 63 (15.8%)

Closed 138 (34.6%)

PR Types

Minor 134 (33.6%)

Major 9 (2.3%)

Patch 231 (57.9%)

symfony/http-foundation

Security Advisories

Symfony has a security issue when parsing the Authorization header

Prevent cache poisoning via a Response Content-Type header in Symfony

Invalid HTTP method overrides allow possible XSS or other attacks in Symfony

Argument injection in a MimeTypeGuesser in Symfony

Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass

Recent PRs

Package Details

Security Advisories

11

Package Information

PR Status

PR Types

`symfony/http-foundation`