`symfony/http-foundation`

Ecosystem:
packagist

Package URL:
pkg:composer/symfony/http-foundation

Total PRs:
402 Dependabot PRs

Latest PR:
about 21 hours ago

Unique Repositories:
286 repositories

Unique Repos (30 days):
86 repositories

Security Advisories

Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass

GHSA-3rg7-wf37-54rm CVE-2025-64500 HIGH published 13 days ago • updated 4 days ago

### Description The `Request` class improperly interprets some `PATH_INFO` in a way that leads to representing some URLs with a path that doesn't ...

View all 11 advisories

Recent PRs (filtered by: Closed )

RSS Feed Clear filter

composer(deps): bump symfony/http-foundation from 7.3.0 to 7.3.2

cyberspectrum/pdflatex-bundle #16

7.3.0 → 7.3.2 Patch PR

Closed 4 months ago 1 comment

build(deps): Bump the symfony group across 1 directory with 9 updates

nextcloud/3rdparty #2109

6.4.18 → 6.4.24 Patch PR

Closed 4 months ago 1 comment

build(deps): Bump the symfony group across 1 directory with 9 updates

nextcloud/3rdparty #2107

6.4.18 → 6.4.24 Patch PR

Closed 4 months ago 1 comment

Bump symfony/http-foundation from 7.3.1 to 7.3.2

omnicolor/commlink #2477

7.3.1 → 7.3.2 Patch PR

Closed 4 months ago 1 comment

chore: composer(deps): bump the all group in /webservice with 37 updates

pfadfinden/event-pager #143

7.3.1 → 7.3.2 Patch PR

Closed 4 months ago 1 comment

Bump symfony/http-foundation from 7.1.1 to 7.3.1

trendyminds/orbit-statamic #4

7.1.1 → 7.3.1 Minor PR

Closed 4 months ago 1 comment

Bump symfony/http-foundation from 6.4.3 to 6.4.23

veganhacktivists/veganactivism #95

6.4.3 → 6.4.23 Patch PR

Closed 4 months ago 1 comment

Bump symfony/http-foundation from 5.4.6 to 5.4.46

bnw/firefly-iii-fints-importer #171

5.4.6 → 5.4.46 Patch PR

Closed 5 months ago

Bump symfony/http-foundation from 2.7.49 to 2.7.51 in /modules/ide-integration/src/main/containers/pga/airavata-php-gateway

apache/airavata #543

2.7.49 → 2.7.51 Patch PR

Closed 5 months ago 2 comments

Bump symfony/http-foundation from 7.2.7 to 7.3.1

calkeo/calkeo-terminal #33

7.2.7 → 7.3.1 Minor PR

Closed 5 months ago 1 comment

Bump symfony/http-foundation from 7.3.0 to 7.3.1

MahoCommerce/maho #222

7.3.0 → 7.3.1 Patch PR

Closed 5 months ago

chore(deps): bump symfony/http-foundation from 7.3.0 to 7.3.1

pratikid/LEG #50

7.3.0 → 7.3.1 Patch PR

Closed 5 months ago 2 comments

Bump symfony/http-foundation from 7.3.0 to 7.3.1

MahoCommerce/maho #211

7.3.0 → 7.3.1 Patch PR

Closed 5 months ago 1 comment

composer(deps): bump symfony/http-foundation from 7.3.0 to 7.3.1

cyberspectrum/pdflatex-bundle #14

7.3.0 → 7.3.1 Patch PR

Closed 5 months ago 1 comment

build(deps): bump symfony/http-foundation from 7.3.0 to 7.3.1

thorsten/phpMyFAQ #3543

7.3.0 → 7.3.1 Patch PR

Closed 5 months ago 1 comment

Bump symfony/http-foundation from 7.3.0 to 7.3.1

flow-php/flow #1748

7.3.0 → 7.3.1 Patch PR

Closed 5 months ago 2 comments

Bump symfony/http-foundation from 6.3.9 to 6.4.14

sfu-dhil/mvm #192

6.3.9 → 6.4.14 Minor PR

Closed 5 months ago 2 comments

Bump symfony/http-foundation from 6.4.7 to 6.4.14

Developartment/symfony-sandbox #208

6.4.7 → 6.4.14 Patch PR

Closed 6 months ago 1 comment

Bump symfony/http-foundation from 7.2.5 to 7.3.0 in /api

mglaman/drupal-mrn #328

7.2.5 → 7.3.0 Minor PR

Closed 6 months ago 1 comment

Bump the patch-updates group with 9 updates

wmde/fundraising-application #3107

7.2.6 → 7.3.0 Minor PR

Closed 6 months ago 1 comment

build(deps): Bump the symfony group across 1 directory with 8 updates

nextcloud/3rdparty #2086

6.4.18 → 6.4.22 Patch PR

Closed 6 months ago 1 comment

build(deps): Bump the symfony group across 1 directory with 8 updates

nextcloud/3rdparty #2085

6.4.18 → 6.4.22 Patch PR

Closed 6 months ago 1 comment

Bump symfony/http-foundation from 5.4.20 to 5.4.48

heyitsmi/covid-19 #10

5.4.20 → 5.4.48 Patch PR

Closed 6 months ago 1 comment

Bump symfony/http-foundation from 4.4.49 to 5.4.48

sfu-dhil/pi #90

4.4.49 → 5.4.48 Major PR

Closed 6 months ago 1 comment

Bump the composer group across 1 directory with 5 updates

BoomchainLabs/Chonkboard #10

7.0.7 → 7.2.6 Minor PR

Closed 6 months ago 1 comment

chore(deps): bump symfony/http-foundation from 6.4.4 to 7.1.7

adrien-force/OC-P14-EX1-Adrien-Force #1

6.4.4 → 7.1.7 Major PR

Closed 7 months ago

Bump the composer group across 1 directory with 2 updates

ZAGOUE/games_ticket_newbackend #1

6.3.12 → 6.4.14 Minor PR

Closed 7 months ago 1 comment

Bump the composer group across 1 directory with 11 updates

BusterBunny-G5/snipe-it #1

4.4.39 → 4.4.49 Patch PR

Closed 7 months ago 1 comment

Bump the composer group across 1 directory with 9 updates

Jexactyl/Jexactyl #445

6.2.6 → 6.4.21 Minor PR

Closed 7 months ago

Bump the composer group across 1 directory with 6 updates

itsanvert/SBKU-Official #10

6.3.2 → 6.4.21 Minor PR

Closed 7 months ago 1 comment

Bump symfony/http-foundation from 7.2.5 to 7.2.6

SolidInvoice/SolidInvoice #1696

7.2.5 → 7.2.6 Patch PR

Closed 7 months ago 4 comments

Bump symfony/http-foundation from 6.3.7 to 6.4.18

raydanielg/It-Company #3

6.3.7 → 6.4.18 Minor PR

Closed 7 months ago 1 comment

Bump the composer group across 1 directory with 5 updates

Swat-info/laravel-crud-generator1 #1

7.0.4 → 7.2.5 Minor PR

Closed 8 months ago 1 comment

Bump the composer group across 1 directory with 6 updates

khulnasoft/CodeX #14

6.4.3 → 6.4.18 Patch PR

Closed 8 months ago 5 comments

Bump symfony/http-foundation from 6.4.13 to 6.4.18 in /Man/src

QuentinBubu/MakeANetwork #1

6.4.13 → 6.4.18 Patch PR

Closed 8 months ago 1 comment

Bump symfony/http-foundation from 6.2.8 to 6.4.18

AyoubBrm/ecom_laravel_api #4

6.2.8 → 6.4.18 Minor PR

Closed 8 months ago 1 comment

Bump symfony/http-foundation from 7.0.4 to 7.2.3

apiiro-snyk/corcel #3

7.0.4 → 7.2.3 Minor PR

Closed 8 months ago 1 comment

Bump symfony/http-foundation from 5.0.7 to 5.4.48

kitsada8621/laravel-stock-system #36

5.0.7 → 5.4.48 Minor PR

Closed 9 months ago 1 comment

Bump symfony/http-foundation from 6.0.3 to 6.4.16 in /tests/Application

BitBagCommerce/SyliusElasticsearchPlugin #266

6.0.3 → 6.4.16 Minor PR

Closed 10 months ago 1 comment

Bump symfony/http-foundation from 6.0.8 to 6.4.16 in /e2e/undiscoverable-symbols-1

phpstan/phpstan #12426

6.0.8 → 6.4.16 Minor PR

Closed 10 months ago 1 comment

Bump the composer group across 1 directory with 6 updates

clvnknt/ipt10-rest-api-server-scribe #2

6.1.6 → 6.4.16 Minor PR

Closed 12 months ago

Bump symfony/http-foundation from 7.1.5 to 7.2.0

UtrechtUniversity/msl_api #82

7.1.5 → 7.2.0 Minor PR

Closed 12 months ago

Bump symfony/http-foundation from 5.3.14 to 5.4.46

ej7dev/tamoona_symfony #20

5.3.14 → 5.4.46 Minor PR

Closed about 1 year ago 1 comment

Bump symfony/http-foundation from 5.2.8 to 5.4.46

Pen-y-Fan/lumen-api-using-tdd #8

5.2.8 → 5.4.46 Minor PR

Closed about 1 year ago 1 comment

Bump symfony/http-foundation from 5.4.14 to 5.4.46

fusioncms/fusioncms #819

5.4.14 → 5.4.46 Patch PR

Closed about 1 year ago 1 comment

Bump symfony/http-foundation from 5.4.44 to 5.4.46

Ecodenl/Woningdossier #1811

5.4.44 → 5.4.46 Patch PR

Closed about 1 year ago

Bump symfony/http-foundation from 5.4.31 to 5.4.46

LoicEsk/trello-manager #11

5.4.31 → 5.4.46 Patch PR

Closed about 1 year ago 1 comment

Bump symfony/http-foundation from 5.4.28 to 5.4.46

kachuru/zone #7

5.4.28 → 5.4.46 Patch PR

Closed about 1 year ago

Bump symfony/http-foundation from 5.4.20 to 5.4.46

changeweb/Unifiedtransform #426

5.4.20 → 5.4.46 Patch PR

Closed about 1 year ago 1 comment

Bump symfony/http-foundation from 5.4.2 to 5.4.46

danskernesdigitalebibliotek/ddb-material-list #36

5.4.2 → 5.4.46 Patch PR

Closed about 1 year ago

Package Details

Name:	`symfony/http-foundation`
Ecosystem:	packagist
PURL Type:	composer
Package URL:	`pkg:composer/symfony/http-foundation`
JSON API:	View JSON

Security Advisories

11

Active advisories

CRITICAL 1

HIGH 3

MODERATE 5

LOW 2

View All composer Advisories

Package Information

Description:

Defines an object-oriented layer for the HTTP specification

Repository:	https://github.com/symfony/http-foundation
Homepage:	https://symfony.com
Latest Release:	`v7.3.0` 7 months ago
Dependent Repos:	533,200
Dependent Packages:	4,613
Downloads:	747,469,299
Ranking:	Top 0.0056% by dependent repos Top 0.0068% by downloads Top 0.0081% by dependent pkgs

PR Status

Open 176 (43.8%)

Merged 63 (15.7%)

Closed 140 (34.8%)

PR Types

Minor 134 (33.3%)

Major 9 (2.2%)

Patch 234 (58.2%)

symfony/http-foundation

Security Advisories

Symfony has a security issue when parsing the Authorization header

Prevent cache poisoning via a Response Content-Type header in Symfony

Invalid HTTP method overrides allow possible XSS or other attacks in Symfony

Argument injection in a MimeTypeGuesser in Symfony

Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass

Recent PRs (filtered by: Closed )

Package Details

Security Advisories

11

Package Information

PR Status

PR Types

`symfony/http-foundation`