Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

symfony/http-foundation

Ecosystem:
packagist
Package URL:
pkg:composer/symfony/http-foundation
Total PRs:
402 Dependabot PRs
Latest PR:
about 22 hours ago
Unique Repositories:
286 repositories
Unique Repos (30 days):
86 repositories
Security Advisories
Symfony has a security issue when parsing the Authorization header
GHSA-h7v2-2qwg-h829 CVE-2014-6061 MODERATE published over 1 year ago • updated 11 days ago
All 2.0.X, 2.1.X, 2.2.X, 2.3.X, 2.4.X, and 2.5.X versions of the Symfony HttpFoundation component are affected by this security issue. This issue ...
Prevent cache poisoning via a Response Content-Type header in Symfony
GHSA-mcx4-f5f5-4859 CVE-2020-5255 LOW published over 5 years ago • updated 1 day ago
Description ----------- When a `Response` does not contain a `Content-Type` header, Symfony falls back to the format defined in the `Accept` heade...
Invalid HTTP method overrides allow possible XSS or other attacks in Symfony
GHSA-x92h-wmg2-6hp7 CVE-2019-10913 CRITICAL published almost 6 years ago • updated about 11 hours ago
In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, HTTP Methods provided as verbs or usin...
Argument injection in a MimeTypeGuesser in Symfony
GHSA-xhh6-956q-4q69 CVE-2019-18888 HIGH published almost 6 years ago • updated 4 days ago
An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7. If an application pas...
Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass
GHSA-3rg7-wf37-54rm CVE-2025-64500 HIGH published 13 days ago • updated 4 days ago
### Description The `Request` class improperly interprets some `PATH_INFO` in a way that leads to representing some URLs with a path that doesn't ...
View all 11 advisories
Recent PRs (filtered by: Minor PRs )
RSS Feed Clear filter
Bump the composer group across 1 directory with 5 updates

Swat-info/laravel-crud-generator1 #1

7.0.4 → 7.2.5 Minor PR
Closed 8 months ago 1 comment
Swat-info
Bump symfony/http-foundation from 6.2.8 to 6.4.18

AyoubBrm/ecom_laravel_api #4

6.2.8 → 6.4.18 Minor PR
Closed 8 months ago 1 comment
AyoubBrm
Bump symfony/http-foundation from 6.2.7 to 6.4.18

neayi/insights #258

6.2.7 → 6.4.18 Minor PR
Open 8 months ago 2 comments
neayi
Bump symfony/http-foundation from 7.0.4 to 7.2.3

apiiro-snyk/corcel #3

7.0.4 → 7.2.3 Minor PR
Closed 8 months ago 1 comment
apiiro-snyk
Bump symfony/http-foundation from 5.0.7 to 5.4.48

kitsada8621/laravel-stock-system #36

5.0.7 → 5.4.48 Minor PR
Closed 9 months ago 1 comment
kitsada8621
Bump symfony/http-foundation from 6.0.3 to 6.4.16 in /tests/Application

BitBagCommerce/SyliusElasticsearchPlugin #266

6.0.3 → 6.4.16 Minor PR
Closed 10 months ago 1 comment
BitBagCommerce
Bump symfony/http-foundation from 6.0.8 to 6.4.16 in /e2e/undiscoverable-symbols-1

phpstan/phpstan #12426

6.0.8 → 6.4.16 Minor PR
Closed 10 months ago 1 comment
phpstan
Bump the composer group across 1 directory with 6 updates

clvnknt/ipt10-rest-api-server-scribe #2

6.1.6 → 6.4.16 Minor PR
Closed 12 months ago
clvnknt
Bump symfony/http-foundation from 7.1.5 to 7.2.0

UtrechtUniversity/msl_api #82

7.1.5 → 7.2.0 Minor PR
Closed 12 months ago
UtrechtUniversity
Bump symfony/http-foundation from 5.3.14 to 5.4.46

ej7dev/tamoona_symfony #20

5.3.14 → 5.4.46 Minor PR
Closed about 1 year ago 1 comment
ej7dev
Bump symfony/http-foundation from 5.2.8 to 5.4.46

Pen-y-Fan/lumen-api-using-tdd #8

5.2.8 → 5.4.46 Minor PR
Closed about 1 year ago 1 comment
Pen-y-Fan
build(deps): bump symfony/http-foundation from 5.3.14 to 5.4.46 in /redaxo/src/core

sumonst21/redaxo #1

5.3.14 → 5.4.46 Minor PR
Closed about 1 year ago 1 comment
sumonst21
Bump symfony/http-foundation from 5.2.3 to 5.4.46

webignition/symfony-console-typed-input #33

5.2.3 → 5.4.46 Minor PR
Closed about 1 year ago 1 comment
webignition
Bump symfony/http-foundation from 6.3.6 to 6.4.14

shawndibble/self-storage #135

6.3.6 → 6.4.14 Minor PR
Closed about 1 year ago 2 comments
shawndibble
Bump symfony/http-foundation from 6.3.4 to 6.4.14

EginKaman/rss-feed-bot #36

6.3.4 → 6.4.14 Minor PR
Closed about 1 year ago 1 comment
EginKaman
build(deps): bump symfony/http-foundation from 6.3.2 to 6.4.14

amlxv/studymate #14

6.3.2 → 6.4.14 Minor PR
Merged about 1 year ago
amlxv
Bump symfony/http-foundation from 6.3.12 to 6.4.14

latik/symfony-cqrs-example #9

6.3.12 → 6.4.14 Minor PR
Closed about 1 year ago 1 comment
latik
Bump symfony/http-foundation from 6.2.8 to 6.4.14

validaide/html-builder #19

6.2.8 → 6.4.14 Minor PR
Closed about 1 year ago 1 comment
validaide
Bump symfony/http-foundation from 6.2.6 to 6.4.14

TheRestartProject/restarters.net #767

6.2.6 → 6.4.14 Minor PR
Closed about 1 year ago 2 comments
TheRestartProject
build(deps): bump symfony/http-foundation from 6.2.6 to 6.4.14

recognizerHD/module-factory #8

6.2.6 → 6.4.14 Minor PR
Closed about 1 year ago
recognizerHD
Bump symfony/http-foundation from 6.2.10 to 6.4.14

antonioanerao/openmu-website #14

6.2.10 → 6.4.14 Minor PR
Open about 1 year ago
antonioanerao
Bump symfony/http-foundation from 7.0.7 to 7.1.7

gloggi/qualix #361

7.0.7 → 7.1.7 Minor PR
Merged about 1 year ago
gloggi
build(deps): Bump symfony/http-foundation from 7.0.7 to 7.1.7

VATSIM-UK/uk-controller-api #1666

7.0.7 → 7.1.7 Minor PR
Open about 1 year ago 3 comments
VATSIM-UK
Bump symfony/http-foundation from 7.0.4 to 7.1.7

aldoyh/cyan-bossk #1

7.0.4 → 7.1.7 Minor PR
Closed about 1 year ago 1 comment
aldoyh
Bump symfony/http-foundation from 7.0.6 to 7.1.7 in /app

tristan-lg/Guardian #13

7.0.6 → 7.1.7 Minor PR
Closed about 1 year ago 1 comment
tristan-lg
Bump symfony/http-foundation from 7.0.4 to 7.1.7

parler-haut-interagir-librement/MicroSymfony #9

7.0.4 → 7.1.7 Minor PR
Closed about 1 year ago
parler-haut-interagir-librement
Bump symfony/http-foundation from 7.0.0 to 7.1.7

zelding/wizard #13

7.0.0 → 7.1.7 Minor PR
Closed about 1 year ago 1 comment
zelding
Bump symfony/http-foundation from 3.3.10 to 3.4.47 in /voice/text-to-speech-outbound-lumen

Vonage/vonage-php-code-snippets #68

3.3.10 → 3.4.47 Minor PR
Closed over 4 years ago 1 comment
Vonage
Bump symfony/http-foundation from 4.3.6 to 4.4.1

Jholkin/historyClinic #2

4.3.6 → 4.4.1 Minor PR
Merged almost 6 years ago
Jholkin
Bump symfony/http-foundation from 4.2.6 to 4.4.1 in /Laravel

phunsanit/snippets #2

4.2.6 → 4.4.1 Minor PR
Closed almost 6 years ago
phunsanit
Bump symfony/http-foundation from 4.3.4 to 4.4.1

METS-Programme/vmmcdashboard #5

4.3.4 → 4.4.1 Minor PR
Closed almost 6 years ago 1 comment
METS-Programme
Bump symfony/http-foundation from 4.3.0 to 4.4.1

ub-unibe-ch/bernhist #6

4.3.0 → 4.4.1 Minor PR
Closed almost 6 years ago
ub-unibe-ch
Bump symfony/http-foundation from 3.2.6 to 3.4.36

oecax2208/Aya-Blog #2

3.2.6 → 3.4.36 Minor PR
Closed almost 6 years ago 1 comment
oecax2208
Bump symfony/http-foundation from 3.2.8 to 3.4.36

johnnyhuy/laravel-appointment-booking-system #2

3.2.8 → 3.4.36 Minor PR
Closed almost 6 years ago
johnnyhuy
Package Details
Name: symfony/http-foundation
Ecosystem: packagist
PURL Type: composer
Package URL: pkg:composer/symfony/http-foundation
JSON API: View JSON
Security Advisories

11

Active advisories
CRITICAL 1
HIGH 3
MODERATE 5
LOW 2
View All composer Advisories
Package Information
Description:

Defines an object-oriented layer for the HTTP specification

Repository: https://github.com/symfony/http-foundation
Homepage: https://symfony.com
Latest Release: v7.3.0
7 months ago
Dependent Repos: 533,200
Dependent Packages: 4,613
Downloads: 747,469,299
Ranking: Top 0.0056% by dependent repos Top 0.0068% by downloads Top 0.0081% by dependent pkgs
PR Status
Open 176 (43.8%)
Merged 63 (15.7%)
Closed 140 (34.8%)
PR Types
Minor 134 (33.3%)
Major 9 (2.2%)
Patch 234 (58.2%)