`symfony/http-kernel`

Ecosystem:
packagist

Package URL:
pkg:composer/symfony/http-kernel

Total PRs:
280 Dependabot PRs

Latest PR:
18 days ago

Unique Repositories:
166 repositories

Unique Repos (30 days):
16 repositories

Security Advisories

Synfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]

GHSA-6439-2f28-8p8q CVE-2026-45075 MODERATE published 23 days ago • updated 3 days ago

### Description Symfony's `#[IsGranted('...')]`, `#[IsSignatureValid]`, and `#[IsCsrfTokenValid(...)]` attributes allow you to define a `methods: ...

View all 8 advisories

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

chore(deps): bump the symfony group across 1 directory with 10 updates

EmilAP/OpenEMR #41

6.4.35 → 6.4.41 Patch PR

Open 18 days ago 1 comment

chore(deps): bump the symfony group with 11 updates

depyakr/localopenemr #7

7.4.8 → 7.4.13 Patch PR

Open 21 days ago 2 comments

chore(deps): bump the composer group across 1 directory with 5 updates

42dx/whatsapp-laravel-sdk #27

7.4.10 → 7.4.13 Patch PR

Closed 23 days ago 1 comment

Bump symfony/http-kernel from 7.4.8 to 7.4.13 in /imageViewer

mkaraki/IllustStore #270

7.4.8 → 7.4.13 Patch PR

Open 23 days ago 3 comments

Bump symfony/http-kernel from 7.4.7 to 7.4.13

scify/laradev-react #30

7.4.7 → 7.4.13 Patch PR

Open 23 days ago 1 comment

Bump symfony/http-kernel from 7.4.8 to 7.4.13

hoquanganh09/motvietshop #20

7.4.8 → 7.4.13 Patch PR

Open 23 days ago 2 comments

chore(deps): bump symfony/http-kernel from 7.4.8 to 7.4.13 in /backend

AVL05/distrito-gourmet #7

7.4.8 → 7.4.13 Patch PR

Closed 23 days ago 1 comment

Bump symfony/http-kernel from 7.4.7 to 7.4.13

SyncEngine/SyncEngine #176

7.4.7 → 7.4.13 Patch PR

Closed 23 days ago 2 comments

build(deps): bump symfony/http-kernel from 7.4.10 to 7.4.13

CCSDForge/episciences-citations #147

7.4.10 → 7.4.13 Patch PR

Closed 23 days ago 1 comment

Bump symfony/http-kernel from 8.0.10 to 8.0.13

vu-sa/vusa.lt #577

8.0.10 → 8.0.13 Patch PR

Closed 23 days ago 1 comment

Bump symfony/http-kernel from 7.4.11 to 7.4.13 in /backend

kravenor/myfinance #4

7.4.11 → 7.4.13 Patch PR

Closed 23 days ago 1 comment

deps(php): bump symfony/http-kernel from 7.4.11 to 7.4.13

simtabi/get-installer-admin #7

7.4.11 → 7.4.13 Patch PR

Open 23 days ago 1 comment

chore(deps)(deps): bump symfony/http-kernel from 8.0.11 to 8.0.13 in /backend

roldaobatista/sistema #105

8.0.11 → 8.0.13 Patch PR

Open 23 days ago 1 comment

chore(deps-dev): bump the composer group across 1 directory with 2 updates

42dx/whatsapp-laravel-sdk #24

7.4.10 → 7.4.13 Patch PR

Closed 23 days ago 1 comment

Bump symfony/http-kernel from 8.0.11 to 8.0.13

shipfastlabs/modern-livewire-starter-kit-auth #4

8.0.11 → 8.0.13 Patch PR

Closed 23 days ago 1 comment

(chore): Bump the composer group with 14 updates

yardinternet/wp-user-roles #107

6.4.39 → 6.4.40 Patch PR

Closed 25 days ago 2 comments

(chore): Bump the composer group with 8 updates

yardinternet/wp-user-roles #106

6.4.38 → 6.4.39 Patch PR

Closed about 1 month ago 2 comments

(chore): Bump the composer group with 9 updates

yardinternet/wp-user-roles #105

6.4.36 → 6.4.38 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump the symfony group across 1 directory with 12 updates

Smritad/openemr #32

6.4.31 → 6.4.38 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump the symfony group across 1 directory with 11 updates

azkuang/openemr #49

6.4.33 → 6.4.38 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump the symfony group with 6 updates

openemr/openemr #12041

7.4.8 → 7.4.10 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump the symfony group across 1 directory with 7 updates

Willgunter/openemr #37

6.4.35 → 6.4.36 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump the symfony group across 1 directory with 8 updates

Mahek472/openemr #42

6.4.34 → 6.4.36 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump the symfony group with 5 updates

EmilAP/OpenEMR #1

6.4.35 → 6.4.36 Patch PR

Open 2 months ago 1 comment

chore(deps): bump the symfony group with 5 updates

alkhudarigroupuae/medical #1

6.4.35 → 6.4.36 Patch PR

Closed 2 months ago 2 comments

chore(deps): Bump the symfony group across 1 directory with 10 updates

norumander/opentriage #37

6.4.33 → 6.4.36 Patch PR

Open 2 months ago 2 comments

Bump the composer group across 1 directory with 5 updates

michaelprowacki/proda #3

5.4.4 → 5.4.51 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the symfony group with 9 updates

jfmcdavitt/openemr #9

6.4.33 → 6.4.35 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the symfony group with 9 updates

azkuang/openemr #7

6.4.33 → 6.4.34 Patch PR

Closed 4 months ago 2 comments

chore(deps): bump the symfony group with 9 updates

avogabos/openemr #7

6.4.33 → 6.4.34 Patch PR

Closed 4 months ago 2 comments

chore(deps): bump the symfony group with 9 updates

mehbub-lab/OpenEMR--BIS-Care-X #11

6.4.33 → 6.4.34 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the symfony group with 9 updates

shweta-patki/openemr-7.04 #21

6.4.33 → 6.4.34 Patch PR

Open 4 months ago 2 comments

Bump the symfony group with 15 updates

InfraR5/glpi_r5 #3

6.4.31 → 6.4.33 Patch PR

Closed 4 months ago 1 comment

Update symfony/http-kernel requirement from ^6.4 || ^7.4 to ^8.0.5

kununu/testing-bundle #88

^6.4 || ^7.4 → ^8.0.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the symfony group with 10 updates

kevinwsbr/openemr #3

6.4.30 → 6.4.33 Patch PR

Open 4 months ago 1 comment

composer(deps): bump the symfony-core group with 7 updates

PhilDaiguille/symfony-template #69

8.0.4 → 8.0.5 Patch PR

Closed 5 months ago 2 comments

chore(deps): bump the php-dependencies group with 26 updates

SpiriitLabs/JiraServiceDesk #161

7.4.4 → 7.4.5 Patch PR

Closed 5 months ago 1 comment

build(deps): bump symfony/http-kernel from 8.0.4 to 8.0.5

thorsten/phpMyFAQ #3920

8.0.4 → 8.0.5 Patch PR

Open 5 months ago 1 comment

Bump symfony/http-kernel from 7.4.4 to 7.4.5

omnicolor/commlink #2893

7.4.4 → 7.4.5 Patch PR

Closed 5 months ago 2 comments

chore(deps): bump the symfony group with 10 updates

maniastevenjener/EMR #3

6.4.30 → 6.4.32 Patch PR

Open 5 months ago 1 comment

Bump the symfony group with 39 updates

kdgyimah/be #8

8.0.3 → 8.0.4 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the symfony-framework group with 38 updates

parti-renaissance/espace-adherent #12848

7.4.3 → 7.4.4 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the symfony group across 1 directory with 12 updates

saketh-bandi/Relay_Heidi_Hackathon #32

6.4.27 → 6.4.32 Patch PR

Open 5 months ago 1 comment

chore(deps): bump the symfony group with 9 updates

openemr/openemr #10393

6.4.31 → 6.4.32 Patch PR

Closed 5 months ago 1 comment

Bump symfony/http-kernel from 5.4.12 to 5.4.50

akeneo/pim-community-dev #20596

5.4.12 → 5.4.50 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the symfony group with 7 updates

miguelix90/farmakit #1

6.4.30 → 6.4.31 Patch PR

Open 5 months ago 1 comment

composer(deps): bump the symfony-core group with 12 updates

PhilDaiguille/symfony-template #61

8.0.2 → 8.0.3 Patch PR

Closed 5 months ago 2 comments

chore(deps): bump the php-dependencies group with 45 updates

SpiriitLabs/JiraServiceDesk #145

7.4.0 → 7.4.2 Patch PR

Open 6 months ago 1 comment

chore(deps): bump the symfony group across 1 directory with 9 updates

saketh-bandi/Relay_Heidi_Hackathon #17

6.4.27 → 6.4.30 Patch PR

Closed 6 months ago 2 comments

Bump the symfony group with 5 updates

glpi-project/glpi #22144

6.4.27 → 6.4.29 Patch PR

Closed 7 months ago 3 comments

Package Details

Name:	`symfony/http-kernel`
Ecosystem:	packagist
PURL Type:	composer
Package URL:	`pkg:composer/symfony/http-kernel`
JSON API:	View JSON

Security Advisories

8

Active advisories

HIGH 3

MODERATE 5

View All composer Advisories

Package Information

Description:

Provides a structured process for converting a Request into a Response

Repository:	https://github.com/symfony/http-kernel
Homepage:	https://symfony.com
Latest Release:	`v7.2.6` about 1 year ago
Dependent Repos:	534,064
Dependent Packages:	5,492
Downloads:	696,099,444
Ranking:	Top 0.0054% by dependent repos Top 0.0086% by downloads Top 0.0061% by dependent pkgs

PR Status

Open 86 (30.7%)

Merged 44 (15.7%)

Closed 142 (50.7%)

PR Types

Major 8 (2.9%)

Minor 53 (18.9%)

Patch 210 (75.0%)

symfony/http-kernel

Security Advisories

Synfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]

Symfony Http-Kernel has non-constant time comparison in UriSigner

Symfony allows direct access of ESI URLs behind a trusted proxy

Symfony Incorrect Access Control

Webcache Poisoning in symfony/http-kernel

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

8

Package Information

PR Status

PR Types

`symfony/http-kernel`