Symfony Validator vulnerabilities
2 known vulnerabilities affecting symfony/validator.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1LOW1
Vulnerabilities
Page 1 of 1
CVE-2024-50343LOW≥ 0, < 5.4.43≥ 6.0.0, < 6.4.11+1 more2024-11-06
CVE-2024-50343 [LOW] CWE-20 Symfony has an incorrect response from Validator when input ends with `\n`
Symfony has an incorrect response from Validator when input ends with `\n`
### Description
It is possible to trick a `Validator` configured with a regular expression using the `$` metacharacters, with an input ending with `\n`.
### Resolution
Symfony now uses the `D` regex modifier to match the entire input.
The patch for this issue is available [here](https://github.com/symfony/symfony/co
ghsaosv
CVE-2013-4751HIGH≥ 2.0.0, < 2.0.24≥ 2.1.0, < 2.1.12+2 more2022-05-05
CVE-2013-4751 [HIGH] CWE-20 Symfony collectionCascaded and collectionCascadedDeeply fields security bypass
Symfony collectionCascaded and collectionCascadedDeeply fields security bypass
When using the Validator component, if `Symfony\\Component\\Validator\\Mapping\\Cache\\ApcCache` is enabled (or any other cache implementing `Symfony\\Component\\Validator\\Mapping\\Cache\\CacheInterface`), some information is lost during serialization (the `collectionCascaded` and the `collectionCascadedDeeply`
ghsaosv