CVE security advisories and vulnerability history for symfony/symfony by symfony.
88
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
3
Public exploits
PoC or exploit code
6.9
Avg CVSS
2012–2026
Last updated
Overview
symfony symfony/symfony has 88 published CVE records since 2012, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 6.9.
This page aggregates every publicly disclosed vulnerability (CVE) affecting symfony symfony/symfony, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of symfony symfony/symfony's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical8
High35
Medium37
Low8
In CISA’s Known Exploited Vulnerabilities catalog
0
None of symfony symfony/symfony's CVEs are currently listed in CISA's KEV catalog.
Public exploits
3
3 of symfony symfony/symfony's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every symfony symfony/symfony version named in a CVE, then pick one to see only the CVEs that affect it.
Version ranges
8.0.0 <= v < 8.0.1222 CVEs
7.0.0 <= v < 7.4.1215 CVEs
< 5.4.5211 CVEs
6.0.0 <= v < 6.4.4010 CVEs
8.0.0 <= v < 8.0.136 CVEs
2.0.0 <= v < 2.3.195 CVEs
2.4.0 <= v < 2.4.95 CVEs
2.5.0 <= v < 2.5.45 CVEs
2.8.0 <= v < 2.8.505 CVEs
3.0.0 <= v < 3.4.265 CVEs
4.0.0 <= v < 4.1.125 CVEs
Common weakness types
The CWE weakness categories most often found in symfony symfony/symfony CVEs. Follow any weakness for its full explanation.
Common questions about symfony symfony/symfony vulnerabilities.
How many CVEs does symfony symfony/symfony have?
symfony symfony/symfony has 88 published CVE records since 2012.
How many symfony symfony/symfony CVEs are in CISA KEV?
None of symfony symfony/symfony's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for symfony symfony/symfony vulnerabilities?
Yes — 3 of symfony symfony/symfony's CVEs have a known public exploit.
Which versions of symfony symfony/symfony are affected?
271 distinct symfony symfony/symfony versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in symfony symfony/symfony CVEs?
symfony symfony/symfony's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-287 (Improper Authentication), CWE-20 (Improper Input Validation), CWE-384 (Session Fixation).
How many critical symfony symfony/symfony vulnerabilities are there?
symfony symfony/symfony has 8 critical and 35 high-severity CVEs.
What is the average severity of symfony symfony/symfony CVEs?
The average CVSS base score across symfony symfony/symfony's scored CVEs is 6.9.
