symfony1 vulnerabilities

2 known vulnerabilities in symfony1 from FriendsOfSymfony1. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  symfony1: Deserialization of Untrusted Data

  CVE-2024-28861Mar 22, 2024FriendsOfSymfony1EPSS 1.55%

  Symfony 1 is a community-driven fork of the 1.x branch of Symfony, a PHP framework for web projects. Starting in version 1.1.0 and prior to version 1.5.19, Symfony 1 has a gadget chain due to dangerous deserialization in `sfNamespacedParameterHolder` class tha

• 9.0 Critical severity

  symfony1: Deserialization of Untrusted Data

  CVE-2024-28859Mar 15, 2024FriendsOfSymfony1EPSS 1.59%

  Symfony1 is a community fork of symfony 1.4 with DIC, form enhancements, latest Swiftmailer, better performance, composer compatible and PHP 8 support. Symfony 1 has a gadget chain due to vulnerable Swift Mailer dependency that would enable an attacker to get