`symfony/security-http`

Ecosystem:
packagist

Package URL:
pkg:composer/symfony/security-http

Total PRs:
71 Dependabot PRs

Latest PR:
4 days ago

Unique Repositories:
56 repositories

Unique Repos (30 days):
7 repositories

Security Advisories

Symphony Denial of Service Via Overlong Usernames

GHSA-whgv-8cg3-7hcm CVE-2016-4423 HIGH published about 4 years ago • updated 1 day ago

The attemptAuthentication function in `Component/Security/Http/Firewall/UsernamePasswordFormAuthenticationListener.php` in Symfony before 2.3.41, 2...

Symfony's OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claims

GHSA-29fc-p6c4-24cg CVE-2026-45069 MODERATE published 23 days ago • updated about 14 hours ago

### Description `OidcTokenHandler` is Symfony's built-in access-token handler for OpenID Connect: it validates a bearer JWT and returns the authen...

Synfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]

GHSA-6439-2f28-8p8q CVE-2026-45075 MODERATE published 23 days ago • updated 3 days ago

### Description Symfony's `#[IsGranted('...')]`, `#[IsSignatureValid]`, and `#[IsCsrfTokenValid(...)]` attributes allow you to define a `methods: ...

Improper authentication in Symfony

GHSA-cchx-mfrc-fwqr CVE-2019-10911 HIGH published over 6 years ago • updated about 7 hours ago

In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, a vulnerability would allow an attacke...

Authentication granted to all firewalls instead of just one

GHSA-rfcf-m67m-jcrq CVE-2021-32693 MODERATE published almost 5 years ago • updated 2 days ago

Description ----------- When an application defines multiple firewalls, the authenticated token delivered by one of the firewalls is available to ...

View all 16 advisories

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump symfony/security-http from 8.0.12 to 8.0.13

douzeEnsemble/pokenini-api #277

8.0.12 → 8.0.13 Patch PR

Closed 4 days ago 1 comment

Bump the composer group across 1 directory with 17 updates

TheJ-Erk400/mautic-dev #21

5.4.35 → 5.4.53 Patch PR

Closed 23 days ago 1 comment

Bump symfony/security-http from 6.4.19 to 6.4.41 in /user-restricted-separate-auth-tutorials/nhs-login/php

NHSDigital/hello-world-auth-examples #192

6.4.19 → 6.4.41 Patch PR

Closed 23 days ago 1 comment

Bump the composer group across 1 directory with 10 updates

TheJ-Erk400/mautic-dev #14

5.4.35 → 5.4.53 Patch PR

Closed 23 days ago 1 comment

⬆️ Bump symfony/security-http from 8.0.6 to 8.0.13 in /tools/phpstan

darkwood-com/darkwood-com #137

8.0.6 → 8.0.13 Patch PR

Closed 23 days ago 1 comment

build(deps): bump the composer group across 1 directory with 11 updates

YoutacRandS-VA/mautic #24

5.4.35 → 5.4.47 Patch PR

Closed about 2 months ago 1 comment

Bump the composer group across 1 directory with 12 updates

hiepnguyenmmo/mautic #10

5.4.35 → 5.4.47 Patch PR

Closed about 2 months ago 1 comment

Bump the composer group across 1 directory with 11 updates

hiepnguyenmmo/mautic #7

5.4.35 → 5.4.47 Patch PR

Closed 2 months ago 1 comment

Bump the composer group across 1 directory with 9 updates

TheJ-Erk400/mautic-dev #8

5.4.35 → 5.4.47 Patch PR

Closed 2 months ago 1 comment

Bump the symfony group with 39 updates

kdgyimah/be #8

8.0.3 → 8.0.4 Patch PR

Closed 5 months ago 1 comment

Bump the composer group across 1 directory with 7 updates

TheJ-Erk400/mautic-dev #3

5.4.35 → 5.4.47 Patch PR

Open 9 months ago

Bump the composer group across 1 directory with 7 updates

joseguzman1337/mautic #30

5.4.35 → 5.4.47 Patch PR

Open 9 months ago

fix: Bump the symfony group with 33 updates

cedricziel/faro-shop #1701

7.3.2 → 7.3.3 Patch PR

Open 10 months ago 1 comment

Bump the composer group across 1 directory with 2 updates

JulioIlunga/smartimmo-admin #1

6.4.14 → 6.4.25 Patch PR

Open 10 months ago

Bump the composer group across 1 directory with 6 updates

MateuszPlebanek/usersymfony2 #1

5.4.21 → 5.4.47 Patch PR

Open 11 months ago

chore: composer(deps): bump the all group in /webservice with 37 updates

pfadfinden/event-pager #143

7.3.1 → 7.3.2 Patch PR

Closed 11 months ago 1 comment

fix: bump the symfony group with 40 updates

cedricziel/faro-shop #1615

7.3.1 → 7.3.2 Patch PR

Merged 11 months ago 1 comment

build(deps): bump symfony/security-http from 6.4.15 to 6.4.23

EC-CUBE/ec-cube #6411

6.4.15 → 6.4.23 Patch PR

Merged 12 months ago 1 comment

Bump symfony/security-http from 6.4.0 to 6.4.22

sfu-dhil/mvm #196

6.4.0 → 6.4.22 Patch PR

Open 12 months ago 1 comment

Bump symfony/security-http from 6.4.3 to 6.4.22

Developartment/symfony-sandbox #205

6.4.3 → 6.4.22 Patch PR

Open about 1 year ago

chore: composer(deps): bump the all group in /webservice with 27 updates

pfadfinden/event-pager #116

7.2.4 → 7.2.6 Patch PR

Merged about 1 year ago 1 comment

build(deps): bump symfony/security-http from 6.4.7 to 6.4.15

ar-koder/devtools #442

6.4.7 → 6.4.15 Patch PR

Open over 1 year ago 2 comments

Bump symfony/security-http from 6.4.8 to 6.4.15 in /www

openbenches/openbenches.org #381

6.4.8 → 6.4.15 Patch PR

Closed over 1 year ago

Bump symfony/security-http from 6.4.12 to 6.4.15

wecmk/wec-sermons-area #56

6.4.12 → 6.4.15 Patch PR

Closed over 1 year ago

Bump symfony/security-http from 5.4.45 to 5.4.47

crosiersource/crosierlib-base #43

5.4.45 → 5.4.47 Patch PR

Merged over 1 year ago

Bump symfony/security-http from 5.4.41 to 5.4.47

camdram/camdram #2499

5.4.41 → 5.4.47 Patch PR

Open over 1 year ago 1 comment

Bump symfony/security-http from 7.1.7 to 7.1.8

Nyuwb/nyuw.dev #65

7.1.7 → 7.1.8 Patch PR

Merged over 1 year ago 1 comment

Bump symfony/security-http from 5.4.12 to 5.4.47 in /symfony

LegoMany/pos #12

5.4.12 → 5.4.47 Patch PR

Closed over 1 year ago

chore(deps): bump symfony/security-http from 7.1.5 to 7.1.8

sjunior-dev/symfony-api-test #30

7.1.5 → 7.1.8 Patch PR

Open over 1 year ago 2 comments

Build(deps): bump symfony/security-http from 5.4.23 to 5.4.41

Thrive-ERP/myddleware #8

5.4.23 → 5.4.41 Patch PR

Closed almost 2 years ago 1 comment

Bump symfony/security-http from 6.3.2 to 6.3.8

ErikTrapman/cyclear #11

6.3.2 → 6.3.8 Patch PR

Closed over 2 years ago

Bump symfony/security-http from 6.3.1 to 6.3.8

alexsobolenko/symfony4-test #6

6.3.1 → 6.3.8 Patch PR

Closed over 2 years ago 1 comment

Bump symfony/security-http from 6.3.0 to 6.3.8 in /application

pyrech/3dfollow #18

6.3.0 → 6.3.8 Patch PR

Closed over 2 years ago 2 comments

Bump symfony/security-http from 4.4.22 to 4.4.30

vpmv/unchained-skeleton #25

4.4.22 → 4.4.30 Patch PR

Closed over 4 years ago

Bump symfony/security-http from 5.2.6 to 5.2.12

yakoub/mbo #7

5.2.6 → 5.2.12 Patch PR

Closed almost 5 years ago 1 comment

Bump symfony/security-http from 5.2.3 to 5.2.8

AscensoDigital/ADComponentBundle #8

5.2.3 → 5.2.8 Patch PR

Merged about 5 years ago

Bump symfony/security-http from 5.0.4 to 5.0.7

parijke/google-auth #1

5.0.4 → 5.0.7 Patch PR

Open about 6 years ago 4 comments

Bump symfony/security-http from 5.0.1 to 5.0.7

Grifanja/DesignPatterns #1

5.0.1 → 5.0.7 Patch PR

Merged about 6 years ago

Bump symfony/security-http from 4.3.0 to 4.3.9

ub-unibe-ch/bernhist #4

4.3.0 → 4.3.9 Patch PR

Closed over 6 years ago

Bump symfony/security-http from 4.3.4 to 4.3.9 in /symfony

EmmanuelLefevre/EasyGardenDWWM #3

4.3.4 → 4.3.9 Patch PR

Closed over 6 years ago 1 comment

Package Details

Name:	`symfony/security-http`
Ecosystem:	packagist
PURL Type:	composer
Package URL:	`pkg:composer/symfony/security-http`
JSON API:	View JSON

Security Advisories

16

Active advisories

HIGH 7

MODERATE 8

LOW 1

View All composer Advisories

Package Information

Description:

Symfony Security Component - HTTP Integration

Repository:	https://github.com/symfony/security-http
Homepage:	https://symfony.com
Latest Release:	`v7.3.0` about 1 year ago
Dependent Repos:	24,571
Dependent Packages:	135
Downloads:	132,454,987
Ranking:	Top 0.0567% by dependent repos Top 0.0584% by downloads Top 0.2232% by dependent pkgs

PR Status

Open 18 (25.4%)

Merged 10 (14.1%)

Closed 37 (52.1%)

PR Types

Major 10 (14.1%)

Minor 15 (21.1%)

Patch 40 (56.3%)