← Back to packages

Real saved report · no signup required

C

Symfony HTTP Foundation

Packagist · symfony/http-foundation

78.0

Health score /100

No issues to assess

Daily monitoring ·

Upstream repository: symfony/http-foundation ↗

Grades measure upstream repository maintenance health, not the security of a specific installed version. Security findings below concern the dependencies inspected in that repository; coverage may be incomplete.

Maintenance breakdown

Resolution

70/100

  • No issues to assess

    Repository has no issues to evaluate close rate.

Risk Flags

100/100

Backlog Health

80/100

  • Clean backlog

    No open issues in backlog.

Responsiveness

70/100

  • No open issues found

    No recent open issues to assess responsiveness. Score set to neutral.

Score history

Scan completed (UTC)GradeHealth score
C78.0
C78.0
C78.0
C78.0
C78.0
C78.0
C78.0
C78.0
C78.0
C78.0
C78.0
C78.0
C78.0
C78.0
C78.0
C78.0
C78.0
C78.0
C78.0

Security findings

doctrine/dbal ^4.3

  • Doctrine DBAL SQL injection possibility

    high · GHSA-76w8-mqx4-wjrf

    View advisory ↗

  • DBAL 3 SQL Injection Security Vulnerability

    critical · CVE-2021-43608

    View advisory ↗

predis/predis ^1.1|^2.0

  • Predis: Redis command injection and denial of service via CRLF smuggling in pipelined commands on aggregate connections

    critical · CVE-2026-84372

    View advisory ↗

symfony/cache ^7.4|^8.0

  • Symfony Vulnerable to SQL Injection in PdoAdapter::doClear() via Unsanitized $prefix

    unknown · CVE-2026-45073

    View advisory ↗

  • Symfony Unsafe Cache Serialization Could Enable RCE

    critical · CVE-2019-18889

    View advisory ↗

  • Deserialization of untrusted data in Symfony

    high · CVE-2019-10912

    View advisory ↗

symfony/dependency-injection ^7.4|^8.0

  • Symfony XML Entity Expansion security vulnerability

    high · GHSA-c636-cg5r-2498

    View advisory ↗

  • Symfony Service IDs Allow Injection

    critical · CVE-2019-10910

    View advisory ↗

symfony/http-kernel ^7.4|^8.0

  • Symfony Vulnerable to PHP Eval Injection

    unknown · CVE-2015-2308

    View advisory ↗

  • Symfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]

    high · CVE-2026-45075

    View advisory ↗

  • RCE in Symfony

    high · CVE-2020-15094

    View advisory ↗

  • Symfony storing cookie headers in HttpCache

    medium · CVE-2022-24894

    View advisory ↗

  • Webcache Poisoning in symfony/http-kernel

    medium · CVE-2021-41267

    View advisory ↗

  • Symfony Http-Kernel has non-constant time comparison in UriSigner

    high · CVE-2019-18887

    View advisory ↗

  • Symfony Incorrect Access Control

    unknown · CVE-2015-4050

    View advisory ↗

  • Symfony allows direct access of ESI URLs behind a trusted proxy

    high · CVE-2014-5245

    View advisory ↗

symfony/mime ^7.4|^8.0

  • Symfony has Email Header / SMTP Command Injection via CRLF in Symfony\Component\Mime\Address

    high · CVE-2026-45067

    View advisory ↗

  • Symfony has Email Header Injection via Non-Token Characters in Mime Parameter Names

    unknown · CVE-2026-45070

    View advisory ↗

  • Argument injection in a MimeTypeGuesser in Symfony

    high · CVE-2019-18888

    View advisory ↗

Healthier alternatives

  • No alternatives were returned by this scan.
Check your dependencies Check your dependencies

We check this public collection daily. You can scan your own dependencies for free.