dom-crawler vulnerabilities

1 known vulnerability in dom-crawler from Symfony. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  symfony: Improper Restriction of XML External Entity Reference

  CVE-2026-45071Jul 14, 2026Symfony

  Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, Crawler::addXmlContent() set DOMDocument::$validateOnParse = true before loadXML(), re-enabling external entity resol