`symfony/http-foundation`

Ecosystem:
packagist

Package URL:
pkg:composer/symfony/http-foundation

Total PRs:
406 Dependabot PRs

Latest PR:
1 day ago

Unique Repositories:
289 repositories

Unique Repos (30 days):
90 repositories

Security Advisories

Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass

GHSA-3rg7-wf37-54rm CVE-2025-64500 HIGH published 14 days ago • updated about 2 hours ago

### Description The `Request` class improperly interprets some `PATH_INFO` in a way that leads to representing some URLs with a path that doesn't ...

View all 11 advisories

Recent PRs (filtered by: Open , Minor PRs )

RSS Feed Clear filter

feat(deps): bump symfony/http-foundation from 7.2.8 to 7.3.7

VilnaCRM-Org/user-service #219

7.2.8 → 7.3.7 Minor PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 7.2.6 to 7.3.7

BlueVineyard/performance-appraisal-tool #10

7.2.6 → 7.3.7 Minor PR

Open 14 days ago 1 comment

Bump the composer group across 1 directory with 11 updates

devsdocs/OLAINDEX #1

5.2.2 → 5.4.48 Minor PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 7.2.6 to 7.3.7 in the composer group across 1 directory

williamsjeffersonfiagan/portfolio #1

7.2.6 → 7.3.7 Minor PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 7.2.3 to 7.3.7 in /plugins/paymethod/paypal

trizist/omp #2

7.2.3 → 7.3.7 Minor PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 7.2.3 to 7.3.7

matcho14/laravel_cogov #10

7.2.3 → 7.3.7 Minor PR

Open 14 days ago 1 comment

build(deps): bump symfony/http-foundation from 7.2.3 to 7.3.7

ivuorinen/branch-usage-checker #33

7.2.3 → 7.3.7 Minor PR

Open 14 days ago 2 comments

Bump symfony/http-foundation from 7.2.3 to 7.3.7

jeet1293/laragames #8

7.2.3 → 7.3.7 Minor PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 7.2.3 to 7.3.7

LogbieLLC/lgbe2 #45

7.2.3 → 7.3.7 Minor PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 7.2.3 to 7.3.7

cloudinary-community/cloudinary-laravel #166

7.2.3 → 7.3.7 Minor PR

Open 14 days ago 1 comment

Bump the composer group across 1 directory with 3 updates

aran964230/opensource-casino-v10 #8

7.2.2 → 7.3.7 Minor PR

Open 14 days ago 1 comment

chore(deps): Bump symfony/http-foundation from 7.2.2 to 7.3.7

parseen254/weather-app-api #3

7.2.2 → 7.3.7 Minor PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 7.2.2 to 7.3.7

rusmanplatd/laravel-policy #3

7.2.2 → 7.3.7 Minor PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 7.1.9 to 7.3.7 in /storybook

PrestaShop/autoupgrade #1525

7.1.9 → 7.3.7 Minor PR

Open 14 days ago 5 comments

Bump symfony/http-foundation from 7.1.5 to 7.3.7

entrepeneur4lyf/social-network-laravel #6

7.1.5 → 7.3.7 Minor PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 2.6.4 to 2.8.52 in /tests/apps/php

alessio/dokku #10

2.6.4 → 2.8.52 Minor PR

Open 14 days ago 1 comment

Bump symfony/http-foundation from 3.2.7 to 3.3.6 in the composer group across 1 directory

mdupreejr/opus #2

3.2.7 → 3.3.6 Minor PR

Open 2 months ago

Bump symfony/http-foundation from 5.3.1 to 5.4.48

summercms/carsonbot #2

5.3.1 → 5.4.48 Minor PR

Open 2 months ago

bump symfony/http-foundation from 5.2.4 to 5.4.48

summercms/laravel-arangodb #2

5.2.4 → 5.4.48 Minor PR

Open 2 months ago

Bump the composer group across 1 directory with 5 updates

logreg-n-coffee/laravel-notes-api-playground #2

6.3.2 → 6.4.25 Minor PR

Open 3 months ago

Bump the composer group across 1 directory with 5 updates

yandetoure/carewell #1

7.1.5 → 7.3.2 Minor PR

Open 3 months ago

Bump symfony/http-foundation from 2.4.4 to 2.8.52

teraone/couchdb-endpoint #1

2.4.4 → 2.8.52 Minor PR

Open 3 months ago

Bump the composer group across 1 directory with 5 updates

TanNhatCMS/laravel-management-center #1

7.0.6 → 7.3.2 Minor PR

Open 4 months ago

Bump the composer group across 1 directory with 5 updates

MoustaphaFEKOTAN/API-GraphQL-laravel-projet-biblioth-que #1

7.1.1 → 7.3.2 Minor PR

Open 4 months ago

Bump the composer group across 1 directory with 5 updates

MoustaphaFEKOTAN/API-Restful-laravel-projet-biblioth-que #1

7.1.1 → 7.3.2 Minor PR

Open 4 months ago

Bump the composer group across 1 directory with 6 updates

imranniaz-st/Trading #1

7.1.3 → 7.3.1 Minor PR

Open 4 months ago

Bump the composer group across 1 directory with 8 updates

jeffersongoncalves/erp #1

7.1.3 → 7.3.1 Minor PR

Open 4 months ago

Bump the composer group across 1 directory with 6 updates

ghazafm/ngaringan-population-hub #26

7.1.3 → 7.3.1 Minor PR

Open 4 months ago

chore(deps): bump the composer group across 1 directory with 6 updates

jeffersongoncalves/superduper-filament-starter-kit #1

7.1.1 → 7.3.1 Minor PR

Open 4 months ago

Bump the composer group across 1 directory with 6 updates

jeffersongoncalves/palestra-filament-demo #1

7.0.7 → 7.3.1 Minor PR

Open 4 months ago

Bump the composer group across 1 directory with 6 updates

jeffersongoncalves/filamentphp-v3-tutorial #1

6.3.4 → 6.4.23 Minor PR

Open 4 months ago

Bump the composer group across 1 directory with 5 updates

jeffersongoncalves/XpertBotFitness_Backend #1

6.3.2 → 6.4.23 Minor PR

Open 4 months ago

Bump the composer group across 1 directory with 6 updates

foxviewr/email-orders #9

7.1.3 → 7.3.1 Minor PR

Open 5 months ago

Bump the composer group across 1 directory with 7 updates

Tedydev-web/kho68.com #2

7.1.5 → 7.3.1 Minor PR

Open 5 months ago

Bump symfony/http-foundation from 7.2.5 to 7.3.1 in /api

mglaman/drupal-mrn #352

7.2.5 → 7.3.1 Minor PR

Open 5 months ago

Bump symfony/http-foundation from 6.3.8 to 6.4.23

Elieser007/Elieser_Aguilar #4

6.3.8 → 6.4.23 Minor PR

Open 5 months ago

Bump the composer group across 1 directory with 5 updates

aminatadiouf/gestion_eleves #1

6.3.8 → 6.4.22 Minor PR

Open 5 months ago

Bump symfony/http-foundation from 6.3.6 to 6.4.14

MickaelJN/guestbooktest #1

6.3.6 → 6.4.14 Minor PR

Open 5 months ago

Bump symfony/http-foundation from 7.0.4 to 7.3.0

ebucodes/yip_ecommerce #4

7.0.4 → 7.3.0 Minor PR

Open 5 months ago

chore(deps): bump the composer group across 1 directory with 7 updates

TheJ-Erk400/coolify-dev #2

7.1.5 → 7.3.0 Minor PR

Open 5 months ago

Bump symfony/http-foundation from 3.2.7 to 3.4.47

thealbertyang/otis #1

3.2.7 → 3.4.47 Minor PR

Open 5 months ago

Bump symfony/http-foundation from 7.1.5 to 7.3.0 in /laravel-best

justoanff/php-laravel-demo #4

7.1.5 → 7.3.0 Minor PR

Open 5 months ago

Bump the composer group across 1 directory with 4 updates

w-pinkietech/pinkieit #45

6.3.4 → 6.4.22 Minor PR

Open 6 months ago 2 comments

Bump symfony/http-foundation from 6.0.20 to 6.4.22 in /useless_homework/circle/game

QAQgettingstupid/somebody_help_me #1

6.0.20 → 6.4.22 Minor PR

Open 6 months ago

Bump the composer group across 1 directory with 5 updates

andri-devoloper/projek_umum #1

6.2.8 → 6.4.22 Minor PR

Open 6 months ago

Bump the composer group across 1 directory with 6 updates

andri-devoloper/laravel-parkir-mobil #1

6.2.7 → 6.4.22 Minor PR

Open 6 months ago

composer(deps): bump symfony/http-foundation from 7.2.6 to 7.3.0

cyberspectrum/pdflatex-bundle #2

7.2.6 → 7.3.0 Minor PR

Open 6 months ago

Bump symfony/http-foundation from 7.2.6 to 7.3.0

SolidInvoice/SolidInvoice #1767

7.2.6 → 7.3.0 Minor PR

Open 6 months ago 4 comments

Bump the dependencies group with 2 updates

FlorianLeChat/YouTube-Downloader #38

7.2.2 → 7.3.0 Minor PR

Open 6 months ago

Bump symfony/http-foundation from 7.2.6 to 7.3.0

burningmantech/ranger-clubhouse-api #2042

7.2.6 → 7.3.0 Minor PR

Open 6 months ago 1 comment

Package Details

Name:	`symfony/http-foundation`
Ecosystem:	packagist
PURL Type:	composer
Package URL:	`pkg:composer/symfony/http-foundation`
JSON API:	View JSON

Security Advisories

11

Active advisories

CRITICAL 1

HIGH 3

MODERATE 5

LOW 2

View All composer Advisories

Package Information

Description:

Defines an object-oriented layer for the HTTP specification

Repository:	https://github.com/symfony/http-foundation
Homepage:	https://symfony.com
Latest Release:	`v7.3.0` 7 months ago
Dependent Repos:	533,200
Dependent Packages:	4,613
Downloads:	747,469,299
Ranking:	Top 0.0056% by dependent repos Top 0.0068% by downloads Top 0.0081% by dependent pkgs

PR Status

Open 176 (43.3%)

Merged 63 (15.5%)

Closed 144 (35.5%)

PR Types

Minor 135 (33.3%)

Major 10 (2.5%)

Patch 236 (58.1%)

symfony/http-foundation

Security Advisories

Symfony has a security issue when parsing the Authorization header

Symfony vulnerable to denial of service via a malicious HTTP Host header

Invalid HTTP method overrides allow possible XSS or other attacks in Symfony

Argument injection in a MimeTypeGuesser in Symfony

Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass

Recent PRs (filtered by: Open , Minor PRs )

Package Details

Security Advisories

11

Package Information

PR Status

PR Types

`symfony/http-foundation`