symfony/routing vulnerabilities

CVEs whose affected-version data names the symfony/routing package (composer). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-48784Medium

Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization

Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization

▾ Sunlitsymfony · symfony/routingEPSS 0.35%via GHSA

symfony/routing vulnerabilities (CVEs) · VulnSea