`symfony/http-foundation`

Ecosystem:
packagist

Package URL:
pkg:composer/symfony/http-foundation

Total PRs:
406 Dependabot PRs

Latest PR:
2 days ago

Unique Repositories:
289 repositories

Unique Repos (30 days):
90 repositories

Security Advisories

Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass

GHSA-3rg7-wf37-54rm CVE-2025-64500 HIGH published 15 days ago • updated about 14 hours ago

### Description The `Request` class improperly interprets some `PATH_INFO` in a way that leads to representing some URLs with a path that doesn't ...

View all 11 advisories

Recent PRs (filtered by: Merged )

RSS Feed Clear filter

Bump the dependencies group with 2 updates

FlorianLeChat/YouTube-Downloader #43

7.3.3 → 7.3.4 Patch PR

Merged about 2 months ago

Bump the patch-updates group with 9 updates

wmde/fundraising-application #3150

7.3.3 → 7.3.4 Patch PR

Merged about 2 months ago

composer(deps): bump the symfony-core group with 15 updates

PhilDaiguille/symfony-template #27

7.3.3 → 7.3.4 Patch PR

Merged about 2 months ago 1 comment

Bump symfony/http-foundation from 7.3.3 to 7.3.4

omnicolor/commlink #2624

7.3.3 → 7.3.4 Patch PR

Merged about 2 months ago

Bump symfony/http-foundation from 7.3.2 to 7.3.4

returnearly/gtld.fyi #769

7.3.2 → 7.3.4 Patch PR

Merged about 2 months ago

Bump symfony/http-foundation from 6.4.25 to 6.4.26

zoiosilva/site #2294

6.4.25 → 6.4.26 Patch PR

Merged about 2 months ago

chore(deps): bump symfony/http-foundation from 7.3.3 to 7.3.4 in /app-backend

DevSkillsHQ/fullstack-boilerplate-php-laravel-vue #586

7.3.3 → 7.3.4 Patch PR

Merged about 2 months ago 1 comment

build(deps): bump the symfony group with 13 updates

simplesamlphp/simplesamlphp #2519

7.3.3 → 7.3.4 Patch PR

Merged about 2 months ago

Bump the composer group across 1 directory with 5 updates

logreg-n-coffee/laravel-chirper #2

6.2.10 → 6.4.25 Minor PR

Merged 3 months ago

composer(deps): bump the symfony-core group with 14 updates

PhilDaiguille/symfony-template #20

7.3.2 → 7.3.3 Patch PR

Merged 3 months ago 1 comment

Bump the symfony group with 11 updates

glpi-project/glpi #20844

6.4.24 → 6.4.25 Patch PR

Merged 3 months ago

fix(deps): bump the all group across 1 directory with 12 updates

shopware/braintree-app #261

7.3.2 → 7.3.3 Patch PR

Merged 3 months ago

Bump the composer group across 1 directory with 5 updates

nirwanadoteth/cafe-marcisa-laravel #2

7.1.1 → 7.3.2 Minor PR

Merged 3 months ago 1 comment

build(deps): bump symfony/http-foundation from 7.1.1 to 7.1.7

Wojtazzzz/ArtList.dev-api #5

7.1.1 → 7.1.7 Patch PR

Merged 3 months ago

Bump symfony/http-foundation from 6.3.4 to 6.4.24 in /api

ohRobertoCarlos/comida-tela-api-laravel #5

6.3.4 → 6.4.24 Minor PR

Merged 4 months ago

(chore): Bump the composer group with 23 updates

yardinternet/wp-user-roles #60

6.4.23 → 6.4.24 Patch PR

Merged 4 months ago 3 comments

build(deps): bump the symfony group with 21 updates

simplesamlphp/simplesamlphp #2495

6.4.23 → 6.4.24 Patch PR

Merged 4 months ago

fix(deps): bump the all group with 14 updates

shopware/braintree-app #241

7.3.1 → 7.3.2 Patch PR

Merged 4 months ago

Bump the patch-updates group with 19 updates

wmde/fundraising-application #3124

7.3.1 → 7.3.2 Patch PR

Merged 4 months ago

chore(deps): bump the symfony group with 39 updates

demos-europe/demosplan-core #5006

6.4.23 → 6.4.24 Patch PR

Merged 4 months ago

fix: bump the symfony group with 40 updates

cedricziel/faro-shop #1615

7.3.1 → 7.3.2 Patch PR

Merged 4 months ago 1 comment

Bump symfony/http-foundation from 7.3.1 to 7.3.2

returnearly/gtld.fyi #573

7.3.1 → 7.3.2 Patch PR

Merged 4 months ago

Bump symfony/http-foundation from 6.2.6 to 6.4.23

fbouynot/netconf #23

6.2.6 → 6.4.23 Minor PR

Merged 4 months ago

Bump the composer group across 1 directory with 6 updates

Joeri-Abbo/dashboard.spatie.be #25

6.4.12 → 6.4.23 Patch PR

Merged 4 months ago

Bump the composer group with 2 updates

Joeri-Abbo/livewire-search #38

5.4.46 → 5.4.48 Patch PR

Merged 4 months ago

Bump the composer group across 1 directory with 6 updates

Joeri-Abbo/laravel-medialibrary-pro-app #26

6.4.12 → 6.4.23 Patch PR

Merged 4 months ago

Bump the composer group across 1 directory with 5 updates

Joeri-Abbo/laravel-kanban #3

6.2.6 → 6.4.23 Minor PR

Merged 4 months ago

Bump the composer group across 1 directory with 5 updates

gabrielnalmeida/book-review #1

7.0.7 → 7.3.1 Minor PR

Merged 5 months ago

Bump symfony/http-foundation from 5.4.20 to 5.4.48

tecnom1k3/serverless-auth #18

5.4.20 → 5.4.48 Patch PR

Merged 5 months ago

Bump symfony/http-foundation from 7.3.0 to 7.3.1

lansuite/lansuite #1351

7.3.0 → 7.3.1 Patch PR

Merged 5 months ago 1 comment

Bump symfony/http-foundation from 7.3.0 to 7.3.1 in the dependencies group

FlorianLeChat/YouTube-Downloader #39

7.3.0 → 7.3.1 Patch PR

Merged 5 months ago

Bump symfony/http-foundation from 7.3.0 to 7.3.1

omnicolor/commlink #2396

7.3.0 → 7.3.1 Patch PR

Merged 5 months ago

chore(deps): bump symfony/http-foundation from 7.3.0 to 7.3.1 in /app

DevSkillsHQ/backend-boilerplate-php-laravel #458

7.3.0 → 7.3.1 Patch PR

Merged 5 months ago 1 comment

Bump symfony/http-foundation from 6.4.22 to 6.4.23

zoiosilva/site #2168

6.4.22 → 6.4.23 Patch PR

Merged 5 months ago

chore(deps): bump the symfony group with 5 updates

openemr/openemr #8545

6.4.22 → 6.4.23 Patch PR

Merged 5 months ago 2 comments

chore(deps): bump the symfony group with 5 updates

openemr/openemr #8499

6.4.18 → 6.4.22 Patch PR

Merged 5 months ago 1 comment

Bump symfony/http-foundation from 6.3.4 to 6.4.22 in the composer group across 1 directory

omnifla/rblxDOTLocal #2

6.3.4 → 6.4.22 Minor PR

Merged 6 months ago

Update symfony/http-foundation requirement from ^7.2 to ^7.3

vinkla/wordplate #532

^7.2 → ^7.3

Merged 6 months ago

Bump the patch-updates group across 1 directory with 5 updates

wmde/fundraising-application #3111

7.2.6 → 7.3.0 Minor PR

Merged 6 months ago

Bump the symfony group with 12 updates

glpi-project/glpi #19845

6.4.18 → 6.4.22 Patch PR

Merged 6 months ago

Bump symfony/http-foundation from 7.2.5 to 7.3.0

lansuite/lansuite #1336

7.2.5 → 7.3.0 Minor PR

Merged 6 months ago 1 comment

build(deps): bump symfony/http-foundation from 7.2.6 to 7.3.0

thorsten/phpMyFAQ #3515

7.2.6 → 7.3.0 Minor PR

Merged 6 months ago

Bump symfony/http-foundation from 7.2.6 to 7.3.0

jerowork/example-application-graphql-attribute-schema #6

7.2.6 → 7.3.0 Minor PR

Merged 6 months ago 1 comment

Bump symfony/http-foundation from 7.2.6 to 7.3.0

omnicolor/commlink #2316

7.2.6 → 7.3.0 Minor PR

Merged 6 months ago

fix: bump the symfony group with 52 updates

cedricziel/faro-shop #1504

7.2.6 → 7.3.0 Minor PR

Merged 6 months ago 1 comment

Bump symfony/http-foundation from 6.4.21 to 6.4.22

zoiosilva/site #2130

6.4.21 → 6.4.22 Patch PR

Merged 6 months ago

Bump symfony/http-foundation from 7.0.7 to 7.2.6 in /szpital

Prawy126/OracleProcedureApp #5

7.0.7 → 7.2.6 Minor PR

Merged 6 months ago

Bump symfony/http-foundation from 3.2.8 to 3.4.47

johnnyhuy/laravel-appointment-booking-system #19

3.2.8 → 3.4.47 Minor PR

Merged 6 months ago

Bump symfony/http-foundation from 7.0.4 to 7.2.6 in /Lab007_AI1_start

Prawy126/AplikacjeInternetowe #5

7.0.4 → 7.2.6 Minor PR

Merged 6 months ago

Bump symfony/http-foundation from 6.4.4 to 6.4.21

TeemoCell/SteamWebAPI #3

6.4.4 → 6.4.21 Patch PR

Merged 6 months ago

Package Details

Name:	`symfony/http-foundation`
Ecosystem:	packagist
PURL Type:	composer
Package URL:	`pkg:composer/symfony/http-foundation`
JSON API:	View JSON

Security Advisories

11

Active advisories

CRITICAL 1

HIGH 3

MODERATE 5

LOW 2

View All composer Advisories

Package Information

Description:

Defines an object-oriented layer for the HTTP specification

Repository:	https://github.com/symfony/http-foundation
Homepage:	https://symfony.com
Latest Release:	`v7.3.0` 7 months ago
Dependent Repos:	533,200
Dependent Packages:	4,613
Downloads:	747,469,299
Ranking:	Top 0.0056% by dependent repos Top 0.0068% by downloads Top 0.0081% by dependent pkgs

PR Status

Open 176 (43.3%)

Merged 63 (15.5%)

Closed 144 (35.5%)

PR Types

Minor 135 (33.3%)

Major 10 (2.5%)

Patch 236 (58.1%)

symfony/http-foundation

Security Advisories

Symfony has a security issue when parsing the Authorization header

Invalid HTTP method overrides allow possible XSS or other attacks in Symfony

Argument injection in a MimeTypeGuesser in Symfony

Symfony vulnerable to denial of service via a malicious HTTP Host header

Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass

Recent PRs (filtered by: Merged )

Package Details

Security Advisories

11

Package Information

PR Status

PR Types

`symfony/http-foundation`