Httpfoundation vulnerabilities

1 known vulnerability in Httpfoundation from Sensiolabs. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  symfony: Use of Non-Canonical URL Paths for Authorization Decisions

  CVE-2025-64500Nov 12, 2025SymfonyEPSS 1.41%

  Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Symfony's HttpFoundation component defines an object-oriented layer for the HTTP specification. Starting in version 2.0.0 and prior to version 5.4.50, 6.4.29, and