How many symfony symfony/http-foundation CVEs are in CISA KEV?

None of symfony symfony/http-foundation's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of symfony symfony/http-foundation are affected?

84 distinct symfony symfony/http-foundation versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in symfony symfony/http-foundation CVEs?

symfony symfony/http-foundation's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-264, CWE-435 (Improper Interaction Between Multiple Correctly-Behaving Entities), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')).

How many critical symfony symfony/http-foundation vulnerabilities are there?

symfony symfony/http-foundation has 1 critical and 2 high-severity CVEs.

What is the average severity of symfony symfony/http-foundation CVEs?

The average CVSS base score across symfony symfony/http-foundation's scored CVEs is 6.3.

symfony symfony/http-foundation Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: symfony symfony/http-foundation vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

symfony symfony/http-foundation Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

symfony symfony/http-foundation has 10 published CVE records since 2012, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting symfony symfony/http-foundation, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of symfony symfony/http-foundation's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High2

Medium6

Low1

In CISA’s Known Exploited Vulnerabilities catalog

None of symfony symfony/http-foundation's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No symfony symfony/http-foundation CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every symfony symfony/http-foundation version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

2.0.0 <= v < 2.3.192 CVEs
2.4.0 <= v < 2.4.92 CVEs
2.5.0 <= v < 2.5.42 CVEs
< 5.4.461 CVE
< 5.4.501 CVE
2.0.0 <= v < 2.0.191 CVE
2.0.0 <= v < 2.0.241 CVE
2.0.0 <= v < 2.3.271 CVE
2.0.0 <= v < 2.8.521 CVE
2.1.0 <= v < 2.1.121 CVE
2.2.0 <= v < 2.2.51 CVE

Common weakness types

The CWE weakness categories most often found in symfony symfony/http-foundation CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many symfony symfony/http-foundation CVEs were published each year.

2012

2018

2019

2020

2024

2025

2026

Other symfony products

Browse vulnerabilities for other products by symfony.

symfony96 CVEs symfony/symfony94 CVEs twig25 CVEs symfony/security-http19 CVEs symfony/security17 CVEs security-http11 CVEs ux10 CVEs symfony/http-kernel8 CVEs

Frequently asked questions

Common questions about symfony symfony/http-foundation vulnerabilities.

How many CVEs does symfony symfony/http-foundation have?: symfony symfony/http-foundation has 10 published CVE records since 2012.
How many symfony symfony/http-foundation CVEs are in CISA KEV?: None of symfony symfony/http-foundation's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for symfony symfony/http-foundation vulnerabilities?: No symfony symfony/http-foundation CVEs currently have a tracked public exploit in this dataset.
Which versions of symfony symfony/http-foundation are affected?: 84 distinct symfony symfony/http-foundation versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in symfony symfony/http-foundation CVEs?: symfony symfony/http-foundation's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-264, CWE-435 (Improper Interaction Between Multiple Correctly-Behaving Entities), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')).
How many critical symfony symfony/http-foundation vulnerabilities are there?: symfony symfony/http-foundation has 1 critical and 2 high-severity CVEs.
What is the average severity of symfony symfony/http-foundation CVEs?: The average CVSS base score across symfony symfony/http-foundation's scored CVEs is 6.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track symfony symfony/http-foundation vulnerabilities

Monitor new symfony symfony/http-foundation vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing