Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

symfony/http-kernel

Ecosystem:
packagist
Package URL:
pkg:composer/symfony/http-kernel
Total PRs:
194 Dependabot PRs
Latest PR:
14 days ago
Unique Repositories:
99 repositories
Unique Repos (30 days):
9 repositories
Security Advisories
Webcache Poisoning in symfony/http-kernel
GHSA-q3j3-w37x-hq2q CVE-2021-41267 MODERATE published about 4 years ago • updated 4 days ago
Description ----------- When a Symfony application is running behind a proxy or a load-balancer, you can tell Symfony to look for the `X-Forwarded...
Symfony allows direct access of ESI URLs behind a trusted proxy
GHSA-wvjv-p5rr-mmqm CVE-2014-5245 HIGH published over 1 year ago • updated 9 days ago
All 2.2.X, 2.3.X, 2.4.X, and 2.5.X versions of the Symfony HttpKernel component are affected by this security issue. Your application is vulnerable...
Symfony Incorrect Access Control
GHSA-qmqw-mpqp-mr54 CVE-2015-4050 MODERATE published over 3 years ago • updated 9 days ago
FragmentListener in the HttpKernel component in Symfony 2.3.19 through 2.3.28, 2.4.9 through 2.4.10, 2.5.4 through 2.5.11, and 2.6.0 through 2.6.7,...
RCE in Symfony
GHSA-754h-5r27-7x3r CVE-2020-15094 HIGH published about 5 years ago • updated about 23 hours ago
Description ----------- The `CachingHttpClient` class from the HttpClient Symfony component relies on the `HttpCache` class to handle requests. `H...
Symfony Http-Kernel has non-constant time comparison in UriSigner
GHSA-q8hg-pf8v-cxrv CVE-2019-18887 HIGH published over 3 years ago • updated 4 days ago
When checking the signature of an URI (an ESI fragment URL for instance), the URISigner did not used a constant time string comparison function, re...
View all 7 advisories
Recent PRs (filtered by: Closed , Minor PRs )
RSS Feed Clear filter
Bump symfony/http-kernel from 3.2.7 to 3.4.49

jonyen/bible-translation #9

3.2.7 → 3.4.49 Minor PR
Closed 14 days ago 1 comment
jonyen
Bump the composer group across 1 directory with 6 updates

clvnknt/ipt10-rest-api-server-scribe #2

6.1.6 → 6.4.16 Minor PR
Closed 12 months ago
clvnknt
Bump symfony/http-kernel from 4.3.5 to 4.4.50 in /Service/VideoMetrics

dappelbe/videometrics #4

4.3.5 → 4.4.50 Minor PR
Closed almost 3 years ago 1 comment
dappelbe
Bump symfony/http-kernel from 4.3.5 to 4.4.50

hackedon/ctf-manager #13

4.3.5 → 4.4.50 Minor PR
Closed almost 3 years ago 1 comment
hackedon
Bump symfony/http-kernel from 4.3.3 to 4.4.50

ChiggyJain/cjTestForExceptionaire #1

4.3.3 → 4.4.50 Minor PR
Closed almost 3 years ago
ChiggyJain
Bump symfony/http-kernel from 5.3.7 to 5.4.20

steveclifton/ArcheryOSA-v.3 #78

5.3.7 → 5.4.20 Minor PR
Closed almost 3 years ago 1 comment
steveclifton
Bump symfony/http-kernel from 3.3.10 to 3.4.49 in /voice/inbound-calls-lumen

Vonage/vonage-php-code-snippets #88

3.3.10 → 3.4.49 Minor PR
Closed almost 3 years ago
Vonage
Bump symfony/http-kernel from 5.2.9 to 5.4.20

arion85/laravel-backend-frontend #18

5.2.9 → 5.4.20 Minor PR
Closed almost 3 years ago
arion85
Bump symfony/http-kernel from 5.2.6 to 5.4.20

10degrees/10degrees-base #94

5.2.6 → 5.4.20 Minor PR
Closed almost 3 years ago 1 comment
10degrees
Bump symfony/http-kernel from 5.2.6 to 5.4.20

KalimeroMK/tge #48

5.2.6 → 5.4.20 Minor PR
Closed almost 3 years ago 1 comment
KalimeroMK
Bump symfony/http-kernel from 5.1.2 to 5.4.20

gitxjl/LemonsJ #12

5.1.2 → 5.4.20 Minor PR
Closed almost 3 years ago 1 comment
gitxjl
Bump symfony/http-kernel from 6.1.3 to 6.2.6

rleroi/Stremio-Laravel #30

6.1.3 → 6.2.6 Minor PR
Closed almost 3 years ago 1 comment
rleroi
Bump symfony/http-kernel from 6.1.0 to 6.2.6

alexdor-rpgmaker/rodexal #42

6.1.0 → 6.2.6 Minor PR
Closed almost 3 years ago
alexdor-rpgmaker
Bump symfony/http-kernel from 3.3.10 to 3.4.49 in /voice/text-to-speech-outbound-lumen

Vonage/vonage-php-code-snippets #73

3.3.10 → 3.4.49 Minor PR
Closed over 3 years ago 1 comment
Vonage
Bump symfony/http-kernel from 4.3.5 to 4.4.39

LeonardD93/laravel-qa #28

4.3.5 → 4.4.39 Minor PR
Closed over 3 years ago
LeonardD93
build(deps): bump symfony/http-kernel from 5.0.11 to 5.1.11

keboola/provisioning-fake-sandbox #10

5.0.11 → 5.1.11 Minor PR
Closed over 4 years ago 1 comment
keboola
Bump symfony/http-kernel from 5.0.2 to 5.1.5

simonberton/easyweb #31

5.0.2 → 5.1.5 Minor PR
Closed about 5 years ago
simonberton
Package Details
Name: symfony/http-kernel
Ecosystem: packagist
PURL Type: composer
Package URL: pkg:composer/symfony/http-kernel
JSON API: View JSON
Security Advisories

7

Active advisories
HIGH 3
MODERATE 4
View All composer Advisories
Package Information
Description:

Provides a structured process for converting a Request into a Response

Repository: https://github.com/symfony/http-kernel
Homepage: https://symfony.com
Latest Release: v7.2.6
7 months ago
Dependent Repos: 534,064
Dependent Packages: 5,492
Downloads: 696,099,444
Ranking: Top 0.0054% by dependent repos Top 0.0086% by downloads Top 0.0061% by dependent pkgs
PR Status
Open 59 (30.4%)
Merged 44 (22.7%)
Closed 83 (42.8%)
PR Types
Minor 37 (19.1%)
Major 4 (2.1%)
Patch 144 (74.2%)