yaml vulnerabilities

2 known vulnerabilities in yaml from Symfony. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  symfony: Inefficient Regular Expression Complexity

  CVE-2026-45305Jul 14, 2026Symfony

  Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, Symfony\Component\Yaml\Parser::cleanup() used regular expressions with overlapping quantifiers for YAML directive, co

• 7.5 High severity

  symfony: Improper Restriction of Recursive Entity References in DTDs

  CVE-2026-45304Jul 14, 2026Symfony

  Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, Symfony\Component\Yaml\Parser resolved YAML collection aliases recursively, allowing a small untrusted YAML input to