symfony/http-foundation vulnerabilities

CVEs whose affected-version data names the symfony/http-foundation package (composer). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-48736Medium

Symfony: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms (6to4, NAT64, Teredo, IPv4-compatible): SSRF Bypass in NoPrivateNetworkHttpClient

Symfony: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms (6to4, NAT64, Teredo, IPv4-compatible): SSRF Bypass in NoPrivateNetworkHttpClient

▾ Sunlitsymfony · symfony/http-clientEPSS 0.57%via GHSA

symfony/http-foundation vulnerabilities (CVEs) · VulnSea