`symfony/http-foundation`

Ecosystem:
packagist

Package URL:
pkg:composer/symfony/http-foundation

Total PRs:
406 Dependabot PRs

Latest PR:
2 days ago

Unique Repositories:
289 repositories

Unique Repos (30 days):
90 repositories

Security Advisories

Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass

GHSA-3rg7-wf37-54rm CVE-2025-64500 HIGH published 14 days ago • updated about 4 hours ago

### Description The `Request` class improperly interprets some `PATH_INFO` in a way that leads to representing some URLs with a path that doesn't ...

View all 11 advisories

Recent PRs

RSS Feed

Bump symfony/http-foundation from 7.3.2 to 7.3.7 in the composer group across 1 directory

ejts29/TechSolutions-Laravel-MVC-CRUD #1

7.3.2 → 7.3.7 Patch PR

Closed 14 days ago 1 comment

Bump symfony/http-foundation from 7.3.1 to 7.3.7

DexlerNG/cachet #2

7.3.1 → 7.3.7 Patch PR

Open 14 days ago 1 comment

feat(deps): bump symfony/http-foundation from 7.3.1 to 7.3.7

VilnaCRM-Org/php-service-template #159

7.3.1 → 7.3.7 Patch PR

Open 14 days ago 2 comments

Bump symfony/http-foundation from 7.3.1 to 7.3.7

tyloo/inertia-demo #7

7.3.1 → 7.3.7 Patch PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 7.3.1 to 7.3.7 in the composer group across 1 directory

askuri/ultimania-server #28

7.3.1 → 7.3.7 Patch PR

Closed 14 days ago 1 comment

Bump symfony/http-foundation from 7.3.1 to 7.3.7 in /command

invokable/atproto-lexicon-contracts #120

7.3.1 → 7.3.7 Patch PR

Closed 14 days ago 1 comment

Bump symfony/http-foundation from 7.3.0 to 7.3.7

arbory/arbory #380

7.3.0 → 7.3.7 Patch PR

Open 14 days ago 1 comment

feat(deps): bump symfony/http-foundation from 7.2.8 to 7.3.7

VilnaCRM-Org/user-service #219

7.2.8 → 7.3.7 Minor PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 7.2.9 to 7.3.7 in the composer group across 1 directory

BenMakesGames/PoppySeedPetsAPI #157

7.2.9 → 7.3.7 Minor PR

Closed 14 days ago 2 comments

Bump symfony/http-foundation from 6.3.12 to 6.4.14

sfu-dhil/digital-mary #78

6.3.12 → 6.4.14 Minor PR

Closed 14 days ago 1 comment

Bump symfony/http-foundation from 7.2.6 to 7.3.7

BlueVineyard/performance-appraisal-tool #10

7.2.6 → 7.3.7 Minor PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 6.3.12 to 6.4.14

sfu-dhil/amplify #93

6.3.12 → 6.4.14 Minor PR

Closed 14 days ago 1 comment

Bump the composer group across 1 directory with 11 updates

devsdocs/OLAINDEX #1

5.2.2 → 5.4.48 Minor PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 7.2.6 to 7.3.7 in the composer group across 1 directory

williamsjeffersonfiagan/portfolio #1

7.2.6 → 7.3.7 Minor PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 7.2.3 to 7.3.7 in /plugins/paymethod/paypal

trizist/omp #2

7.2.3 → 7.3.7 Minor PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 7.2.3 to 7.3.7

matcho14/laravel_cogov #10

7.2.3 → 7.3.7 Minor PR

Open 14 days ago 1 comment

build(deps): bump symfony/http-foundation from 7.2.3 to 7.3.7

ivuorinen/branch-usage-checker #33

7.2.3 → 7.3.7 Minor PR

Open 14 days ago 2 comments

Bump symfony/http-foundation from 7.2.3 to 7.3.7

jeet1293/laragames #8

7.2.3 → 7.3.7 Minor PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 7.2.3 to 7.3.7

LogbieLLC/lgbe2 #45

7.2.3 → 7.3.7 Minor PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 7.2.3 to 7.3.7

cloudinary-community/cloudinary-laravel #166

7.2.3 → 7.3.7 Minor PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 7.2.3 to 7.3.7

erfantkerfan/bank #95

7.2.3 → 7.3.7 Minor PR

Closed 14 days ago 5 comments

Bump symfony/http-foundation from 7.2.3 to 7.3.7

billythekid/quadscorer #17

7.2.3 → 7.3.7 Minor PR

Closed 14 days ago 2 comments

Bump symfony/http-foundation from 4.4.49 to 5.4.50

siosios/filegator #5

4.4.49 → 5.4.50 Major PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 4.4.49 to 5.4.50

sfu-dhil/pi #91

4.4.49 → 5.4.50 Major PR

Closed 14 days ago 1 comment

Bump the composer group across 1 directory with 3 updates

aran964230/opensource-casino-v10 #8

7.2.2 → 7.3.7 Minor PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 7.2.2 to 7.3.7

skdishansachin/ecommerce #3

7.2.2 → 7.3.7 Minor PR

Closed 14 days ago 1 comment

chore(deps): Bump symfony/http-foundation from 7.2.2 to 7.3.7

parseen254/weather-app-api #3

7.2.2 → 7.3.7 Minor PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 7.2.2 to 7.3.7

rusmanplatd/laravel-policy #3

7.2.2 → 7.3.7 Minor PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 7.1.9 to 7.3.7 in /storybook

PrestaShop/autoupgrade #1525

7.1.9 → 7.3.7 Minor PR

Open 14 days ago 5 comments

Bump symfony/http-foundation from 4.4.2 to 4.4.49

mylovecoi/csdlgia_hue #5

4.4.2 → 4.4.49 Patch PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 7.1.5 to 7.3.7

entrepeneur4lyf/social-network-laravel #6

7.1.5 → 7.3.7 Minor PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 7.2.5 to 7.3.7

drevops/git-artifact #207

7.2.5 → 7.3.7 Minor PR

Closed 14 days ago 2 comments

Bump symfony/http-foundation from 2.6.4 to 2.8.52 in /tests/apps/php

alessio/dokku #10

2.6.4 → 2.8.52 Minor PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 7.3.6 to 7.3.7

omnicolor/commlink #2734

7.3.6 → 7.3.7 Patch PR

Closed 14 days ago 2 comments

composer(deps): bump the symfony-core group with 12 updates

PhilDaiguille/symfony-template #37

7.3.5 → 7.3.6 Patch PR

Closed 16 days ago 2 comments

(chore): Bump the composer group with 8 updates

yardinternet/wp-user-roles #72

6.4.26 → 6.4.28 Patch PR

Closed 17 days ago 5 comments

Bump symfony/http-foundation from 4.4.49 to 5.4.46

jtl-software/connector-prestashop #15

4.4.49 → 5.4.46 Major PR

Closed 17 days ago 1 comment

composer(deps): bump the patch-updates group with 21 updates

RumenDamyanov/php-seo #19

7.3.4 → 7.3.6 Patch PR

Open 17 days ago 1 comment

chore(deps): bump symfony/http-foundation from 7.3.5 to 7.3.6 in /app

DevSkillsHQ/backend-boilerplate-php-laravel #563

7.3.5 → 7.3.6 Patch PR

Closed 19 days ago 2 comments

chore(deps): bump the symfony group with 4 updates

sreehari-dev-codes/openEmr #1

6.4.26 → 6.4.28 Patch PR

Closed 19 days ago 3 comments

chore(deps): bump symfony/http-foundation from 7.3.5 to 7.3.6 in /app-backend

DevSkillsHQ/fullstack-boilerplate-php-react-nextjs #640

7.3.5 → 7.3.6 Patch PR

Open 20 days ago 2 comments

chore(deps): bump symfony/http-foundation from 7.3.4 to 7.3.5 in /app-backend

DevSkillsHQ/fullstack-boilerplate-php-react-nextjs #629

7.3.4 → 7.3.5 Patch PR

Open 29 days ago 1 comment

chore(deps): bump symfony/http-foundation from 7.3.3 to 7.3.4 in /app-backend

DevSkillsHQ/fullstack-boilerplate-php-react-nextjs #613

7.3.3 → 7.3.4 Patch PR

Open about 1 month ago 1 comment

build(deps): Bump the symfony group across 1 directory with 10 updates

nextcloud/3rdparty #2162

6.4.14 → 7.3.4 Major PR

Open about 2 months ago 1 comment

Bump symfony/http-foundation from 5.4.40 to 5.4.48

ushahidi/platform #5036

5.4.40 → 5.4.48 Patch PR

Open about 2 months ago

Bump the composer group across 1 directory with 7 updates

TheJ-Erk400/mautic-dev #3

5.4.35 → 5.4.48 Patch PR

Open about 2 months ago

Bump the composer group across 1 directory with 7 updates

joseguzman1337/mautic #30

5.4.35 → 5.4.48 Patch PR

Open about 2 months ago

Bump the symfony group with 12 updates

juanve141277/glpi1 #12

6.4.25 → 6.4.26 Patch PR

Open about 2 months ago

Bump the dependencies group with 2 updates

FlorianLeChat/YouTube-Downloader #43

7.3.3 → 7.3.4 Patch PR

Merged about 2 months ago

Bump symfony/http-foundation from 7.3.3 to 7.3.4

lansuite/lansuite #1378

7.3.3 → 7.3.4 Patch PR

Open about 2 months ago

Package Details

Name:	`symfony/http-foundation`
Ecosystem:	packagist
PURL Type:	composer
Package URL:	`pkg:composer/symfony/http-foundation`
JSON API:	View JSON

Security Advisories

11

Active advisories

CRITICAL 1

HIGH 3

MODERATE 5

LOW 2

View All composer Advisories

Package Information

Description:

Defines an object-oriented layer for the HTTP specification

Repository:	https://github.com/symfony/http-foundation
Homepage:	https://symfony.com
Latest Release:	`v7.3.0` 7 months ago
Dependent Repos:	533,200
Dependent Packages:	4,613
Downloads:	747,469,299
Ranking:	Top 0.0056% by dependent repos Top 0.0068% by downloads Top 0.0081% by dependent pkgs

PR Status

Open 176 (43.3%)

Merged 63 (15.5%)

Closed 144 (35.5%)

PR Types

Minor 135 (33.3%)

Major 10 (2.5%)

Patch 236 (58.1%)

symfony/http-foundation

Security Advisories

Symfony has a security issue when parsing the Authorization header

Symfony vulnerable to denial of service via a malicious HTTP Host header

Invalid HTTP method overrides allow possible XSS or other attacks in Symfony

Argument injection in a MimeTypeGuesser in Symfony

Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass

Recent PRs

Package Details

Security Advisories

11

Package Information

PR Status

PR Types

`symfony/http-foundation`