symfony/ux-autocomplete vulnerabilities
CVEs whose affected-version data names the symfony/ux-autocomplete package (composer). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-49211Mediumsymfony/ux-autocomplete: Information exposure via unescaped LIKE wildcards in EntitySearchUtil
symfony/ux-autocomplete: Information exposure via unescaped LIKE wildcards in EntitySearchUtil
▾ Sunlitsymfony · symfony/ux-autocompleteEPSS 0.53%via GHSA
CVE-2026-49216Mediumsymfony/ux-autocomplete: XSS via unescaped AJAX response data
symfony/ux-autocomplete: XSS via unescaped AJAX response data
▾ Sunlitsymfony · symfony/ux-autocompleteEPSS 0.31%via GHSA