VendorsSymfonyuxany version
Vulnerabilities

Symfony UX any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2026-49211
Symfony UX: Information exposure via unescaped LIKE wildcards in EntitySearchUtil
Published 2026-07-17 · Analyzed
7.5EPSS 0.005
CVE-2026-49212
Symfony UX: LiveComponentHydrator HMAC checksum lacks component and slot binding
Published 2026-07-17 · Analyzed
7.5EPSS 0.002
CVE-2026-49208
Symfony UX: Format-less date LiveProps parsed with the permissive DateTime constructor
Published 2026-07-17 · Analyzed
6.9EPSS 0.004
CVE-2026-49209
Symfony UX: Denial of service in symfony/ux-live-component via unbounded batch action requests
Published 2026-07-17 · Analyzed
6.5EPSS 0.006
CVE-2026-49210
Symfony UX: XSS in symfony/ux-live-component via attacker-controlled child component tag
Published 2026-07-17 · Analyzed
6.1EPSS 0.003
CVE-2026-55877
Symfony UX: XSS in symfony/ux-icons via unsanitized SVG content in local files and Iconify on-demand responses
Published 2026-07-08 · Analyzed
6.1EPSS 0.003
CVE-2026-49216
Symfony UX: XSS in symfony/ux-autocomplete via unescaped AJAX response data
Published 2026-07-17 · Analyzed
5.4EPSS 0.003
CVE-2026-49215
Symfony UX: CSRF Protection Bypass in symfony/ux-live-component — Accept Header is CORS-Safelisted
Published 2026-07-17 · Analyzed
5.4EPSS 0.002