Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

symfony/http-foundation

Ecosystem:
packagist
Package URL:
pkg:composer/symfony/http-foundation
Total PRs:
406 Dependabot PRs
Latest PR:
2 days ago
Unique Repositories:
289 repositories
Unique Repos (30 days):
90 repositories
Security Advisories
Symfony has a security issue when parsing the Authorization header
GHSA-h7v2-2qwg-h829 CVE-2014-6061 MODERATE published over 1 year ago • updated 12 days ago
All 2.0.X, 2.1.X, 2.2.X, 2.3.X, 2.4.X, and 2.5.X versions of the Symfony HttpFoundation component are affected by this security issue. This issue ...
Symfony vulnerable to denial of service via a malicious HTTP Host header
GHSA-v77v-x634-9m56 CVE-2014-5244 HIGH published over 1 year ago • updated about 4 hours ago
All 2.0.X, 2.1.X, 2.2.X, 2.3.X, 2.4.X, and 2.5.X versions of the Symfony HttpFoundation component are affected by this security issue. This issue ...
Invalid HTTP method overrides allow possible XSS or other attacks in Symfony
GHSA-x92h-wmg2-6hp7 CVE-2019-10913 CRITICAL published almost 6 years ago • updated 1 day ago
In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, HTTP Methods provided as verbs or usin...
Argument injection in a MimeTypeGuesser in Symfony
GHSA-xhh6-956q-4q69 CVE-2019-18888 HIGH published almost 6 years ago • updated 5 days ago
An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7. If an application pas...
Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass
GHSA-3rg7-wf37-54rm CVE-2025-64500 HIGH published 14 days ago • updated about 4 hours ago
### Description The `Request` class improperly interprets some `PATH_INFO` in a way that leads to representing some URLs with a path that doesn't ...
View all 11 advisories
Recent PRs (filtered by: Merged , Minor PRs )
RSS Feed Clear filter
Bump the composer group across 1 directory with 5 updates

logreg-n-coffee/laravel-chirper #2

6.2.10 → 6.4.25 Minor PR
Merged 3 months ago
logreg-n-coffee
Bump the composer group across 1 directory with 5 updates

nirwanadoteth/cafe-marcisa-laravel #2

7.1.1 → 7.3.2 Minor PR
Merged 3 months ago 1 comment
nirwanadoteth
Bump symfony/http-foundation from 6.3.4 to 6.4.24 in /api

ohRobertoCarlos/comida-tela-api-laravel #5

6.3.4 → 6.4.24 Minor PR
Merged 4 months ago
ohRobertoCarlos
Bump symfony/http-foundation from 6.2.6 to 6.4.23

fbouynot/netconf #23

6.2.6 → 6.4.23 Minor PR
Merged 4 months ago
fbouynot
Bump the composer group across 1 directory with 5 updates

Joeri-Abbo/laravel-kanban #3

6.2.6 → 6.4.23 Minor PR
Merged 4 months ago
Joeri-Abbo
Bump the composer group across 1 directory with 5 updates

gabrielnalmeida/book-review #1

7.0.7 → 7.3.1 Minor PR
Merged 5 months ago
gabrielnalmeida
Bump symfony/http-foundation from 6.3.4 to 6.4.22 in the composer group across 1 directory

omnifla/rblxDOTLocal #2

6.3.4 → 6.4.22 Minor PR
Merged 6 months ago
omnifla
Bump the patch-updates group across 1 directory with 5 updates

wmde/fundraising-application #3111

7.2.6 → 7.3.0 Minor PR
Merged 6 months ago
wmde
Bump symfony/http-foundation from 7.2.5 to 7.3.0

lansuite/lansuite #1336

7.2.5 → 7.3.0 Minor PR
Merged 6 months ago 1 comment
lansuite
build(deps): bump symfony/http-foundation from 7.2.6 to 7.3.0

thorsten/phpMyFAQ #3515

7.2.6 → 7.3.0 Minor PR
Merged 6 months ago
thorsten
Bump symfony/http-foundation from 7.2.6 to 7.3.0

jerowork/example-application-graphql-attribute-schema #6

7.2.6 → 7.3.0 Minor PR
Merged 6 months ago 1 comment
jerowork
Bump symfony/http-foundation from 7.2.6 to 7.3.0

omnicolor/commlink #2316

7.2.6 → 7.3.0 Minor PR
Merged 6 months ago
omnicolor
fix: bump the symfony group with 52 updates

cedricziel/faro-shop #1504

7.2.6 → 7.3.0 Minor PR
Merged 6 months ago 1 comment
cedricziel
Bump symfony/http-foundation from 7.0.7 to 7.2.6 in /szpital

Prawy126/OracleProcedureApp #5

7.0.7 → 7.2.6 Minor PR
Merged 6 months ago
Prawy126
Bump symfony/http-foundation from 3.2.8 to 3.4.47

johnnyhuy/laravel-appointment-booking-system #19

3.2.8 → 3.4.47 Minor PR
Merged 6 months ago
johnnyhuy
Bump symfony/http-foundation from 7.0.4 to 7.2.6 in /Lab007_AI1_start

Prawy126/AplikacjeInternetowe #5

7.0.4 → 7.2.6 Minor PR
Merged 6 months ago
Prawy126
Bump the composer group across 1 directory with 2 updates

askeita/certibot #11

6.2.13 → 6.3.5 Minor PR
Merged 7 months ago
askeita
Bump symfony/http-foundation from 6.2.13 to 6.3.5 in the composer group across 1 directory

askeita/certibot #4

6.2.13 → 6.3.5 Minor PR
Merged 7 months ago
askeita
Bump symfony/http-foundation from 6.3.1 to 6.4.21

sedehi/filterable #13

6.3.1 → 6.4.21 Minor PR
Merged 7 months ago
sedehi
build(deps): bump symfony/http-foundation from 6.3.2 to 6.4.14

amlxv/studymate #14

6.3.2 → 6.4.14 Minor PR
Merged about 1 year ago
amlxv
Bump symfony/http-foundation from 7.0.7 to 7.1.7

gloggi/qualix #361

7.0.7 → 7.1.7 Minor PR
Merged about 1 year ago
gloggi
Bump symfony/http-foundation from 4.3.6 to 4.4.1

Jholkin/historyClinic #2

4.3.6 → 4.4.1 Minor PR
Merged almost 6 years ago
Jholkin
Package Details
Name: symfony/http-foundation
Ecosystem: packagist
PURL Type: composer
Package URL: pkg:composer/symfony/http-foundation
JSON API: View JSON
Security Advisories

11

Active advisories
CRITICAL 1
HIGH 3
MODERATE 5
LOW 2
View All composer Advisories
Package Information
Description:

Defines an object-oriented layer for the HTTP specification

Repository: https://github.com/symfony/http-foundation
Homepage: https://symfony.com
Latest Release: v7.3.0
7 months ago
Dependent Repos: 533,200
Dependent Packages: 4,613
Downloads: 747,469,299
Ranking: Top 0.0056% by dependent repos Top 0.0068% by downloads Top 0.0081% by dependent pkgs
PR Status
Open 176 (43.3%)
Merged 63 (15.5%)
Closed 144 (35.5%)
PR Types
Minor 135 (33.3%)
Major 10 (2.5%)
Patch 236 (58.1%)