Vulnerabilities

TI-2026-36416 CVE-2026-49215 · GHSA-4m4j-hmqq-3gxm

Symfony UX: CSRF Protection Bypass in symfony/ux-live-component — Accept Header is CORS-Safelisted

LOW 10

Symfony UX is a JavaScript ecosystem for Symfony.

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.00177 Published 2026-07-17 Fixed in 3.1.0, 2.36.0 CWE-352

TI-2026-36417 CVE-2026-49216 · GHSA-mwqm-4fw3-cjvr

LOW 23

Symfony UX is a JavaScript ecosystem for Symfony.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00312 Published 2026-07-17 Fixed in 3.1.0, 2.36.0 CWE-79

TI-2026-36412 CVE-2026-49211 · GHSA-946h-jp5c-8fvh

LOW 37

Symfony UX is a JavaScript ecosystem for Symfony.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00531 Published 2026-07-17 Fixed in 3.1.0, 2.36.0 CWE-200

TI-2026-36409 CVE-2026-49208 · GHSA-89g7-22c8-3j23

LOW 37

Symfony UX is a JavaScript ecosystem for Symfony.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00412 Published 2026-07-17 Fixed in 3.1.0, 2.36.0 CWE-20

TI-2026-36411 CVE-2026-49210 · GHSA-38x5-rcv4-xf7x

LOW 12

Symfony UX is a JavaScript ecosystem for Symfony.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00338 Published 2026-07-17 Fixed in 3.1.0, 2.36.0 CWE-79

TI-2026-36413 CVE-2026-49212 · GHSA-34w5-c283-j9fg

LOW 36

Symfony UX is a JavaScript ecosystem for Symfony.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00242 Published 2026-07-17 Fixed in 3.1.0, 2.36.0 CWE-345

TI-2026-36410 CVE-2026-49209 · GHSA-mm82-c99c-h2cf

LOW 25

Symfony UX is a JavaScript ecosystem for Symfony.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0056 Published 2026-07-17 Fixed in 3.1.0, 2.36.0 CWE-770

TI-2026-40330 CVE-2026-55877 · GHSA-6v8j-33hc-mv84

LOW 27

Symfony UX is a JavaScript ecosystem for Symfony.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00338 Published 2026-07-08 Fixed in 2.36.1, 3.2.0 CWE-79