symfony/http-kernel
Ecosystem:
packagist
packagist
Package URL:
pkg:composer/symfony/http-kernel
Total PRs:
194 Dependabot PRs
194 Dependabot PRs
Latest PR:
13 days ago
13 days ago
Unique Repositories:
99 repositories
99 repositories
Unique Repos (30 days):
9 repositories
9 repositories
Security Advisories
Webcache Poisoning in symfony/http-kernel
GHSA-q3j3-w37x-hq2q
CVE-2021-41267
MODERATE
published about 4 years ago
• updated 4 days ago
Description
-----------
When a Symfony application is running behind a proxy or a load-balancer, you can tell Symfony to look for the `X-Forwarded...
Symfony allows direct access of ESI URLs behind a trusted proxy
GHSA-wvjv-p5rr-mmqm
CVE-2014-5245
HIGH
published over 1 year ago
• updated 8 days ago
All 2.2.X, 2.3.X, 2.4.X, and 2.5.X versions of the Symfony HttpKernel component are affected by this security issue. Your application is vulnerable...
Symfony Incorrect Access Control
GHSA-qmqw-mpqp-mr54
CVE-2015-4050
MODERATE
published over 3 years ago
• updated 8 days ago
FragmentListener in the HttpKernel component in Symfony 2.3.19 through 2.3.28, 2.4.9 through 2.4.10, 2.5.4 through 2.5.11, and 2.6.0 through 2.6.7,...
RCE in Symfony
GHSA-754h-5r27-7x3r
CVE-2020-15094
HIGH
published about 5 years ago
• updated about 8 hours ago
Description
-----------
The `CachingHttpClient` class from the HttpClient Symfony component relies on the `HttpCache` class to handle requests. `H...
Symfony Http-Kernel has non-constant time comparison in UriSigner
GHSA-q8hg-pf8v-cxrv
CVE-2019-18887
HIGH
published over 3 years ago
• updated 4 days ago
When checking the signature of an URI (an ESI fragment URL for instance), the URISigner did not used a constant time string comparison function, re...
Recent PRs (filtered by: Open )
Bump symfony/http-kernel from 6.4.1 to 7.3.0
acquia/acquia-cms-starterkit #181
6.4.1 → 7.3.0
Major PR
Open
6 months ago
Bump symfony/http-kernel from 6.4.21 to 6.4.22 in /web/landing
flow-php/flow #1692
6.4.21 → 6.4.22
Patch PR
Open
6 months ago
chore(deps): bump symfony/http-kernel from 7.2.5 to 7.2.6 in /app-backend
DevSkillsHQ/fullstack-boilerplate-php-react-nextjs #419
7.2.5 → 7.2.6
Patch PR
Open
7 months ago
1 comment
Bump symfony/http-kernel from 5.2.2 to 5.4.21
amitavdevzone/laravel-livewire #45
5.2.2 → 5.4.21
Minor PR
Open
over 2 years ago
2 comments
Bump symfony/http-kernel from 4.4.36 to 4.4.50
Scalingo/sample-laravel-mix #6
4.4.36 → 4.4.50
Patch PR
Open
almost 3 years ago
Bump symfony/http-kernel from 4.4.21 to 4.4.50
ismailcherri/cohort-analysis #27
4.4.21 → 4.4.50
Patch PR
Open
almost 3 years ago
1 comment
Bump symfony/http-kernel from 4.3.4 to 4.4.50
4.3.4 → 4.4.50
Minor PR
Open
almost 3 years ago
1 comment
Bump symfony/http-kernel from 5.0.7 to 5.4.20
5.0.7 → 5.4.20
Minor PR
Open
almost 3 years ago
9 comments
Bump symfony/http-kernel from 6.1.4 to 6.2.6
6.1.4 → 6.2.6
Minor PR
Open
almost 3 years ago
1 comment
Package Details
| Name: | symfony/http-kernel |
| Ecosystem: | packagist |
| PURL Type: | composer |
| Package URL: | pkg:composer/symfony/http-kernel |
| JSON API: | View JSON |
Security Advisories
Package Information
Description:
Provides a structured process for converting a Request into a Response
| Repository: | https://github.com/symfony/http-kernel |
| Homepage: | https://symfony.com |
| Latest Release: |
v7.2.6
7 months ago |
| Dependent Repos: | 534,064 |
| Dependent Packages: | 5,492 |
| Downloads: | 696,099,444 |
| Ranking: | Top 0.0054% by dependent repos Top 0.0086% by downloads Top 0.0061% by dependent pkgs |