`symfony/routing`

Ecosystem:
packagist

Package URL:
pkg:composer/symfony/routing

Total PRs:
96 Dependabot PRs

Latest PR:
1 day ago

Unique Repositories:
45 repositories

Unique Repos (30 days):
17 repositories

Security Advisories

Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization

GHSA-h5x3-xfc9-m39h CVE-2026-48784 MODERATE published 2 days ago • updated 2 days ago

### Description `Symfony\Component\Routing\Generator\UrlGenerator::doGenerate()` percent-encodes `.` and `..` path segments so that the generated ...

Symfony XXE security vulnerability

GHSA-rjpm-qmq7-q85w HIGH published about 2 years ago • updated 16 days ago

Symfony 2.0.11 carried a [similar] XXE security fix, however, on review of ZF2 I also noted a vulnerability to XML Entity Expansion (XEE) attacks w...

Symfony Allows URI Restrictions Bypass Via Double-Encoded String

GHSA-83c3-qx27-2rwr CVE-2012-6431 MODERATE published about 4 years ago • updated 10 days ago

On the Symfony 2.0.x version, there's a security issue that allows access to routes protected by a firewall even when the user is not logged in. B...

Symfony has a UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injection

GHSA-72xp-p242-47p9 CVE-2026-45065 MODERATE published 21 days ago • updated 5 days ago

### Description Symfony routes can declare a requirements regex per path parameter, e.g. a route `/{_locale}/blog` with `requirements: { _locale: ...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

(chore): Bump symfony/routing from 6.4.40 to 6.4.41

yardinternet/brave-scaffold #39

6.4.40 → 6.4.41 Patch PR

Closed 1 day ago 1 comment

build(deps): bump the composer group across 1 directory with 8 updates

REChain-Network-Solutions/AIPlatform #422

6.4.34 → 6.4.41 Patch PR

Closed 21 days ago 1 comment

Bump the composer group across 1 directory with 17 updates

TheJ-Erk400/mautic-dev #21

5.4.35 → 5.4.53 Patch PR

Closed 21 days ago 1 comment

Bump the composer group across 1 directory with 10 updates

yanis-Ramssamy/GestionEcole #8

6.4.12 → 6.4.41 Patch PR

Closed 21 days ago 1 comment

chore(deps): bump the composer group across 1 directory with 5 updates

42dx/whatsapp-laravel-sdk #27

7.4.9 → 7.4.13 Patch PR

Closed 21 days ago 1 comment

chore(deps-dev): bump the composer group across 1 directory with 2 updates

42dx/whatsapp-laravel-sdk #24

7.4.9 → 7.4.13 Patch PR

Closed 21 days ago 1 comment

Bump symfony/routing from 7.4.9 to 7.4.13 in the composer group across 1 directory

netresearch/snipe-it #14

7.4.9 → 7.4.13 Patch PR

Closed 21 days ago 2 comments

build(deps): bump symfony/routing from 7.4.9 to 7.4.13

vancouverfir/czvr-core #1127

7.4.9 → 7.4.13 Patch PR

Closed 21 days ago 1 comment

Bump symfony/routing from 6.4.16 to 6.4.41 in the composer group across 1 directory

mdnayeemsarker/thezonely #19

6.4.16 → 6.4.41 Patch PR

Closed 21 days ago 1 comment

Bump symfony/routing from 7.4.8 to 7.4.13 in the composer group across 1 directory

Nick2bad4u/runelite.phyce.dev #3

7.4.8 → 7.4.13 Patch PR

Open 21 days ago 1 comment

Bump symfony/routing from 7.4.8 to 7.4.13

hoquanganh09/motvietshop #19

7.4.8 → 7.4.13 Patch PR

Open 21 days ago 2 comments

Bump symfony/routing from 7.4.0 to 7.4.13

digitaladapt/preauth #2

7.4.0 → 7.4.13 Patch PR

Closed 21 days ago 1 comment

chore(deps): bump symfony/routing from 7.4.0 to 7.4.13 in the composer group across 1 directory

JSXSTEWART/FreePanel #39

7.4.0 → 7.4.13 Patch PR

Open 21 days ago 1 comment

(chore): Bump the composer group with 14 updates

yardinternet/wp-user-roles #107

6.4.37 → 6.4.40 Patch PR

Closed 23 days ago 2 comments

build(deps): bump the symfony group with 8 updates

nextcloud/3rdparty #2427

6.4.32 → 6.4.37 Patch PR

Closed about 1 month ago 1 comment

build(deps): bump the symfony group across 1 directory with 8 updates

nextcloud/3rdparty #2422

6.4.32 → 6.4.37 Patch PR

Closed about 1 month ago 1 comment

build(deps): bump the symfony group across 1 directory with 6 updates

nextcloud/3rdparty #2378

6.4.32 → 6.4.34 Patch PR

Closed 2 months ago 1 comment

Chore(deps): Bump the symfony_dependencies group across 1 directory with 25 updates

tarlepp/symfony-flex-backend #3239

7.4.6 → 7.4.8 Patch PR

Closed 3 months ago 1 comment

Bump symfony/routing from 7.4.6 to 7.4.8

omnicolor/commlink #3023

7.4.6 → 7.4.8 Patch PR

Closed 3 months ago 2 comments

chore(deps): bump symfony/routing from 7.4.4 to 7.4.6 in /app-backend

DevSkillsHQ/fullstack-boilerplate-php-react-nextjs #763

7.4.4 → 7.4.6 Patch PR

Open 4 months ago 1 comment

Bump the symfony group with 15 updates

InfraR5/glpi_r5 #3

6.4.30 → 6.4.32 Patch PR

Closed 4 months ago 1 comment

build(deps): bump the symfony group across 1 directory with 7 updates

nextcloud/3rdparty #2296

6.4.12 → 6.4.32 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump symfony/routing from 7.4.3 to 7.4.4 in /app

DevSkillsHQ/backend-boilerplate-php-laravel #650

7.4.3 → 7.4.4 Patch PR

Open 5 months ago 1 comment

build(deps): bump symfony/routing from 8.0.3 to 8.0.4

thorsten/phpMyFAQ #3911

8.0.3 → 8.0.4 Patch PR

Open 5 months ago 1 comment

Bump the symfony group with 39 updates

kdgyimah/be #8

8.0.3 → 8.0.4 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the symfony-framework group across 1 directory with 30 updates

parti-renaissance/espace-adherent #12854

7.4.3 → 7.4.4 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the symfony-framework group with 38 updates

parti-renaissance/espace-adherent #12848

7.4.3 → 7.4.4 Patch PR

Closed 5 months ago 1 comment

composer(deps): bump the symfony-core group with 12 updates

PhilDaiguille/symfony-template #61

8.0.1 → 8.0.3 Patch PR

Closed 5 months ago 2 comments

build(deps): bump symfony/routing from 8.0.1 to 8.0.3

thorsten/phpMyFAQ #3835

8.0.1 → 8.0.3 Patch PR

Open 6 months ago 1 comment

Bump the symfony group with 5 updates

glpi-project/glpi #22144

6.4.26 → 6.4.28 Patch PR

Closed 7 months ago 3 comments

Bump the symfony group with 5 updates

glpi-project/glpi #22124

6.4.26 → 6.4.28 Patch PR

Closed 7 months ago 1 comment

composer(deps): bump the symfony-core group with 12 updates

PhilDaiguille/symfony-template #37

7.3.4 → 7.3.6 Patch PR

Closed 7 months ago 2 comments

(chore): Bump the composer group with 8 updates

yardinternet/wp-user-roles #72

6.4.26 → 6.4.28 Patch PR

Closed 7 months ago 5 comments

Bump symfony/routing from 7.3.4 to 7.3.6

SolidInvoice/SolidInvoice #2094

7.3.4 → 7.3.6 Patch PR

Open 7 months ago 3 comments

composer(deps): bump the patch-updates group with 21 updates

RumenDamyanov/php-seo #19

7.3.4 → 7.3.6 Patch PR

Open 7 months ago 1 comment

Bump symfony/routing from 6.4.26 to 6.4.28 in /web/landing

flow-php/flow #1965

6.4.26 → 6.4.28 Patch PR

Closed 7 months ago 1 comment

chore(deps): bump symfony/routing from 7.3.4 to 7.3.6 in /app-backend

DevSkillsHQ/fullstack-boilerplate-php-react-nextjs #638

7.3.4 → 7.3.6 Patch PR

Open 7 months ago 2 comments

Bump symfony/routing from 7.3.2 to 7.3.4

liip/open-swiss-buildings-api #266

7.3.2 → 7.3.4 Patch PR

Open 8 months ago

Bump the symfony group with 12 updates

juanve141277/glpi1 #12

6.4.24 → 6.4.26 Patch PR

Open 9 months ago

Bump symfony/routing from 7.3.2 to 7.3.4

phel-lang/router #27

7.3.2 → 7.3.4 Patch PR

Open 9 months ago 1 comment

chore(deps): bump symfony/routing from 7.3.2 to 7.3.4 in /app-backend

DevSkillsHQ/fullstack-boilerplate-php-laravel-vue #591

7.3.2 → 7.3.4 Patch PR

Open 9 months ago 1 comment

Bump symfony/routing from 6.4.24 to 6.4.26 in /web/landing

flow-php/flow #1883

6.4.24 → 6.4.26 Patch PR

Open 9 months ago

composer(deps): bump the symfony-core group with 15 updates

PhilDaiguille/symfony-template #27

7.3.2 → 7.3.4 Patch PR

Merged 9 months ago 1 comment

(chore): Bump the composer group with 15 updates

yardinternet/wp-user-roles #66

6.4.24 → 6.4.26 Patch PR

Open 9 months ago 3 comments

Bump symfony/routing from 7.3.2 to 7.3.4

omnicolor/commlink #2627

7.3.2 → 7.3.4 Patch PR

Merged 9 months ago

Bump symfony/routing from 6.4.24 to 6.4.26

zoiosilva/site #2299

6.4.24 → 6.4.26 Patch PR

Open 9 months ago

composer(deps): bump the patch-updates group with 18 updates

RumenDamyanov/php-seo #10

7.3.2 → 7.3.4 Patch PR

Open 9 months ago 1 comment

build(deps): bump the symfony group with 13 updates

simplesamlphp/simplesamlphp #2519

7.3.2 → 7.3.4 Patch PR

Merged 9 months ago

Bump the symfony group with 12 updates

glpi-project/glpi #21185

6.4.24 → 6.4.26 Patch PR

Open 9 months ago

build(deps): bump symfony/routing from 7.3.2 to 7.3.4

thorsten/phpMyFAQ #3652

7.3.2 → 7.3.4 Patch PR

Merged 9 months ago 1 comment

Package Details

Name:	`symfony/routing`
Ecosystem:	packagist
PURL Type:	composer
Package URL:	`pkg:composer/symfony/routing`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 1

MODERATE 3

View All composer Advisories

Package Information

Description:

Maps an HTTP request to a set of configuration variables

Repository:	https://github.com/symfony/routing
Homepage:	https://symfony.com
Latest Release:	`v7.3.0` about 1 year ago
Dependent Repos:	511,776
Dependent Packages:	1,478
Downloads:	671,215,023
Ranking:	Top 0.0071% by dependent repos Top 0.01% by downloads Top 0.0286% by dependent pkgs

PR Status

Open 35 (36.5%)

Merged 18 (18.8%)

Closed 39 (40.6%)

PR Types

Major 5 (5.2%)

Minor 11 (11.5%)

Patch 75 (78.1%)