Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

symfony/http-foundation

Ecosystem:
packagist
Package URL:
pkg:composer/symfony/http-foundation
Total PRs:
402 Dependabot PRs
Latest PR:
about 21 hours ago
Unique Repositories:
286 repositories
Unique Repos (30 days):
86 repositories
Security Advisories
Symfony has a security issue when parsing the Authorization header
GHSA-h7v2-2qwg-h829 CVE-2014-6061 MODERATE published over 1 year ago • updated 11 days ago
All 2.0.X, 2.1.X, 2.2.X, 2.3.X, 2.4.X, and 2.5.X versions of the Symfony HttpFoundation component are affected by this security issue. This issue ...
Prevent cache poisoning via a Response Content-Type header in Symfony
GHSA-mcx4-f5f5-4859 CVE-2020-5255 LOW published over 5 years ago • updated 1 day ago
Description ----------- When a `Response` does not contain a `Content-Type` header, Symfony falls back to the format defined in the `Accept` heade...
Invalid HTTP method overrides allow possible XSS or other attacks in Symfony
GHSA-x92h-wmg2-6hp7 CVE-2019-10913 CRITICAL published almost 6 years ago • updated about 10 hours ago
In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, HTTP Methods provided as verbs or usin...
Argument injection in a MimeTypeGuesser in Symfony
GHSA-xhh6-956q-4q69 CVE-2019-18888 HIGH published almost 6 years ago • updated 4 days ago
An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7. If an application pas...
Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass
GHSA-3rg7-wf37-54rm CVE-2025-64500 HIGH published 13 days ago • updated 4 days ago
### Description The `Request` class improperly interprets some `PATH_INFO` in a way that leads to representing some URLs with a path that doesn't ...
View all 11 advisories
Recent PRs (filtered by: Closed , Patch PRs )
RSS Feed Clear filter
Bump symfony/http-foundation from 7.3.5 to 7.3.7

larsmw/CaRMen #4

7.3.5 → 7.3.7 Patch PR
Closed 3 days ago 1 comment
larsmw
Bump symfony/http-foundation from 6.4.26 to 6.4.29 in /html

isobar-playground/base #437

6.4.26 → 6.4.29 Patch PR
Closed 13 days ago 2 comments
isobar-playground
chore(deps): bump symfony/http-foundation from 7.3.1 to 7.3.7

aminnausin/mediaServer #182

7.3.1 → 7.3.7 Patch PR
Closed 13 days ago 1 comment
aminnausin
(chore): Bump symfony/http-foundation from 6.4.23 to 6.4.29

yardinternet/skeleton-package #68

6.4.23 → 6.4.29 Patch PR
Closed 13 days ago 4 comments
yardinternet
(chore): Bump symfony/http-foundation from 6.4.28 to 6.4.29

yardinternet/wp-user-roles #73

6.4.28 → 6.4.29 Patch PR
Closed 13 days ago 4 comments
yardinternet
Bump symfony/http-foundation from 5.4.48 to 5.4.50

anodyne/nova #312

5.4.48 → 5.4.50 Patch PR
Closed 13 days ago 1 comment
anodyne
build(deps): bump symfony/http-foundation from 7.3.6 to 7.3.7

guanguans/favorite-link #348

7.3.6 → 7.3.7 Patch PR
Closed 13 days ago 1 comment
guanguans
Bump symfony/http-foundation from 7.3.6 to 7.3.7

128na/simutrans-portal #413

7.3.6 → 7.3.7 Patch PR
Closed 13 days ago 1 comment
128na
Bump symfony/http-foundation from 7.3.5 to 7.3.7 in /api

GCTC-NTGC/gc-digital-talent #15067

7.3.5 → 7.3.7 Patch PR
Closed 13 days ago 1 comment
GCTC-NTGC
chore(deps): bump symfony/http-foundation from 7.3.5 to 7.3.7

UN-OCHA/unocha-site #709

7.3.5 → 7.3.7 Patch PR
Closed 13 days ago 4 comments
UN-OCHA
Bump symfony/http-foundation from 7.3.5 to 7.3.7

developeregrem/fewohbee #125

7.3.5 → 7.3.7 Patch PR
Closed 13 days ago 1 comment
developeregrem
chore(deps): bump symfony/http-foundation from 7.3.5 to 7.3.7 in the composer group across 1 directory

dfo-osdt/osp #1257

7.3.5 → 7.3.7 Patch PR
Closed 13 days ago 1 comment
dfo-osdt
fix(deps): bump symfony/http-foundation from 7.3.6 to 7.3.7 in /app

lostfocus/geovault #84

7.3.6 → 7.3.7 Patch PR
Closed 13 days ago 2 comments
lostfocus
Bump symfony/http-foundation from 7.3.2 to 7.3.7

aicwebtech/biblesupersearch_api #31

7.3.2 → 7.3.7 Patch PR
Closed 13 days ago 1 comment
aicwebtech
Bump symfony/http-foundation from 7.3.2 to 7.3.7 in /src

bmlt-enabled/bmlt-server #1370

7.3.2 → 7.3.7 Patch PR
Closed 13 days ago 1 comment
bmlt-enabled
Bump symfony/http-foundation from 7.3.3 to 7.3.7 in /tools/psalm

nbgrp/auditor #410

7.3.3 → 7.3.7 Patch PR
Closed 13 days ago 1 comment
nbgrp
Bump symfony/http-foundation from 7.3.2 to 7.3.7

christiancable/nexus5ive #608

7.3.2 → 7.3.7 Patch PR
Closed 13 days ago 3 comments
christiancable
Bump symfony/http-foundation from 7.3.4 to 7.3.7

assoconnect/absolute-percent-value-bundle #11

7.3.4 → 7.3.7 Patch PR
Closed 13 days ago 1 comment
assoconnect
Bump symfony/http-foundation from 7.3.3 to 7.3.7

NoonDaySun-Programming-Pty-Ltd/timeline #11

7.3.3 → 7.3.7 Patch PR
Closed 13 days ago 2 comments
NoonDaySun-Programming-Pty-Ltd
Bump symfony/http-foundation from 7.3.2 to 7.3.7 in the composer group across 1 directory

ejts29/TechSolutions-Laravel-MVC-CRUD #1

7.3.2 → 7.3.7 Patch PR
Closed 13 days ago 1 comment
ejts29
Bump symfony/http-foundation from 7.3.1 to 7.3.7 in the composer group across 1 directory

askuri/ultimania-server #28

7.3.1 → 7.3.7 Patch PR
Closed 13 days ago 1 comment
askuri
Bump symfony/http-foundation from 7.3.1 to 7.3.7 in /command

invokable/atproto-lexicon-contracts #120

7.3.1 → 7.3.7 Patch PR
Closed 13 days ago 1 comment
invokable
Bump symfony/http-foundation from 7.3.6 to 7.3.7

omnicolor/commlink #2734

7.3.6 → 7.3.7 Patch PR
Closed 14 days ago 2 comments
omnicolor
composer(deps): bump the symfony-core group with 12 updates

PhilDaiguille/symfony-template #37

7.3.5 → 7.3.6 Patch PR
Closed 15 days ago 2 comments
PhilDaiguille
(chore): Bump the composer group with 8 updates

yardinternet/wp-user-roles #72

6.4.26 → 6.4.28 Patch PR
Closed 16 days ago 5 comments
yardinternet
chore(deps): bump symfony/http-foundation from 7.3.5 to 7.3.6 in /app

DevSkillsHQ/backend-boilerplate-php-laravel #563

7.3.5 → 7.3.6 Patch PR
Closed 19 days ago 2 comments
DevSkillsHQ
chore(deps): bump the symfony group with 4 updates

sreehari-dev-codes/openEmr #1

6.4.26 → 6.4.28 Patch PR
Closed 19 days ago 3 comments
sreehari-dev-codes
Bump symfony/http-foundation from 7.3.3 to 7.3.4

jerowork/example-application-graphql-attribute-schema #76

7.3.3 → 7.3.4 Patch PR
Closed about 2 months ago 1 comment
jerowork
Bump symfony/http-foundation from 7.3.3 to 7.3.4

flow-php/flow #1870

7.3.3 → 7.3.4 Patch PR
Closed about 2 months ago 1 comment
flow-php
composer(deps): bump symfony/http-foundation from 7.3.0 to 7.3.3

cyberspectrum/pdflatex-bundle #26

7.3.0 → 7.3.3 Patch PR
Closed 3 months ago 2 comments
cyberspectrum
Bump the symfony group with 11 updates

juanve141277/glpi1 #2

6.4.24 → 6.4.25 Patch PR
Closed 3 months ago 1 comment
juanve141277
Bump symfony/http-foundation from 7.3.2 to 7.3.3

MahoCommerce/maho #301

7.3.2 → 7.3.3 Patch PR
Closed 3 months ago 1 comment
MahoCommerce
Bump the symfony group with 11 updates

glpi-project/glpi #20865

6.4.24 → 6.4.25 Patch PR
Closed 3 months ago 1 comment
glpi-project
chore(deps): bump the symfony group with 19 updates

demos-europe/demosplan-core #5161

6.4.24 → 6.4.25 Patch PR
Closed 3 months ago 1 comment
demos-europe
composer(deps): bump symfony/http-foundation from 7.3.0 to 7.3.2

cyberspectrum/pdflatex-bundle #16

7.3.0 → 7.3.2 Patch PR
Closed 4 months ago 1 comment
cyberspectrum
build(deps): Bump the symfony group across 1 directory with 9 updates

nextcloud/3rdparty #2109

6.4.18 → 6.4.24 Patch PR
Closed 4 months ago 1 comment
nextcloud
build(deps): Bump the symfony group across 1 directory with 9 updates

nextcloud/3rdparty #2107

6.4.18 → 6.4.24 Patch PR
Closed 4 months ago 1 comment
nextcloud
Bump symfony/http-foundation from 7.3.1 to 7.3.2

omnicolor/commlink #2477

7.3.1 → 7.3.2 Patch PR
Closed 4 months ago 1 comment
omnicolor
chore: composer(deps): bump the all group in /webservice with 37 updates

pfadfinden/event-pager #143

7.3.1 → 7.3.2 Patch PR
Closed 4 months ago 1 comment
pfadfinden
Bump symfony/http-foundation from 6.4.3 to 6.4.23

veganhacktivists/veganactivism #95

6.4.3 → 6.4.23 Patch PR
Closed 4 months ago 1 comment
veganhacktivists
Bump symfony/http-foundation from 5.4.6 to 5.4.46

bnw/firefly-iii-fints-importer #171

5.4.6 → 5.4.46 Patch PR
Closed 5 months ago
bnw
Bump symfony/http-foundation from 2.7.49 to 2.7.51 in /modules/ide-integration/src/main/containers/pga/airavata-php-gateway

apache/airavata #543

2.7.49 → 2.7.51 Patch PR
Closed 5 months ago 2 comments
apache
Bump symfony/http-foundation from 7.3.0 to 7.3.1

MahoCommerce/maho #222

7.3.0 → 7.3.1 Patch PR
Closed 5 months ago
MahoCommerce
chore(deps): bump symfony/http-foundation from 7.3.0 to 7.3.1

pratikid/LEG #50

7.3.0 → 7.3.1 Patch PR
Closed 5 months ago 2 comments
pratikid
Bump symfony/http-foundation from 7.3.0 to 7.3.1

MahoCommerce/maho #211

7.3.0 → 7.3.1 Patch PR
Closed 5 months ago 1 comment
MahoCommerce
composer(deps): bump symfony/http-foundation from 7.3.0 to 7.3.1

cyberspectrum/pdflatex-bundle #14

7.3.0 → 7.3.1 Patch PR
Closed 5 months ago 1 comment
cyberspectrum
build(deps): bump symfony/http-foundation from 7.3.0 to 7.3.1

thorsten/phpMyFAQ #3543

7.3.0 → 7.3.1 Patch PR
Closed 5 months ago 1 comment
thorsten
Bump symfony/http-foundation from 7.3.0 to 7.3.1

flow-php/flow #1748

7.3.0 → 7.3.1 Patch PR
Closed 5 months ago 2 comments
flow-php
Bump symfony/http-foundation from 6.4.7 to 6.4.14

Developartment/symfony-sandbox #208

6.4.7 → 6.4.14 Patch PR
Closed 6 months ago 1 comment
Developartment
build(deps): Bump the symfony group across 1 directory with 8 updates

nextcloud/3rdparty #2086

6.4.18 → 6.4.22 Patch PR
Closed 6 months ago 1 comment
nextcloud
Package Details
Name: symfony/http-foundation
Ecosystem: packagist
PURL Type: composer
Package URL: pkg:composer/symfony/http-foundation
JSON API: View JSON
Security Advisories

11

Active advisories
CRITICAL 1
HIGH 3
MODERATE 5
LOW 2
View All composer Advisories
Package Information
Description:

Defines an object-oriented layer for the HTTP specification

Repository: https://github.com/symfony/http-foundation
Homepage: https://symfony.com
Latest Release: v7.3.0
7 months ago
Dependent Repos: 533,200
Dependent Packages: 4,613
Downloads: 747,469,299
Ranking: Top 0.0056% by dependent repos Top 0.0068% by downloads Top 0.0081% by dependent pkgs
PR Status
Open 176 (43.8%)
Merged 63 (15.7%)
Closed 140 (34.8%)
PR Types
Minor 134 (33.3%)
Major 9 (2.2%)
Patch 234 (58.2%)