packagist.org: symfony/symfony

The Symfony PHP framework

• Homepage: https://symfony.com
• Licenses: MIT
• Latest release: v7.3.3 (published 8 days ago)
• Last Synced: 2025-09-04T12:30:46.365Z (1 day ago)
• Versions: 789
• Dependent Packages: 3,530
• Dependent Repositories: 22,779
• Downloads: 84,599,710 Total
• Docker Downloads: 2,569,914
• Rankings:
  • Forks count: 0.005%
  • Stargazers count: 0.005%
  • Dependent packages count: 0.011%
  • Dependent repos count: 0.058%
  • Downloads: 0.063%
  • Average: 0.068%
  • Docker downloads count: 0.264%
• Maintainers (1)
  • fabpot
• Funding:
  • url: https://symfony.com/sponsor: type: custom
  • url: https://github.com/fabpot: type: github
  • url: https://github.com/nicolas-grekas: type: github
  • url: https://tidelift.com/funding/github/packagist/symfony/symfony: type: tidelift
• Advisories:
  • Symfony CSRF Vulnerability
  • Symfony potential Cross-site Scripting in WebhookController
  • Symfony Access Control Vulnerability
  • Symfony's `Security::login` does not take into account custom `user_checker`
  • Symfony storing cookie headers in HttpCache
  • Symfony has an incorrect response from Validator when input ends with `\n`
  • CSV Injection in symfony/serializer
  • Prevent cache poisoning via a Response Content-Type header in Symfony
  • Symfony Host Header Injection
  • Symfony Vulnerable to PHP Eval Injection
  • Authentication granted to all firewalls instead of just one
  • Improper authentication in Symfony
  • Symfony allows changing the environment through a query
  • Symfony Cross-site Scripting (XSS) vulnerability
  • Symfony2 security issue when the trust proxy mode is enabled
  • Symfony XML Entity Expansion security vulnerability
  • Symfony Cross-Site Request Forgery vulnerability in the Web Profiler
  • Symfony vulnerable to Session Fixation of CSRF tokens
  • Symfony Allows URI Restrictions Bypass Via Double-Encoded String
  • RCE in Symfony
  • Symfony Open Redirect
  • Symfony Denial of Service Via Long Password Hashing
  • Symfony potential Cross-site Scripting vulnerabilities in CodeExtension filters
  • Symfony possible session fixation vulnerability
  • Symfony Directory Traversal
  • Cookie persistence after password changes in symfony/security-bundle
  • Symfony collectionCascaded and collectionCascadedDeeply fields security bypass
  • Symfony allows internal address and port enumeration by NoPrivateNetworkHttpClient
  • Symfony Unsafe Cache Serialization Could Enable RCE
  • Invalid HTTP method overrides allow possible XSS or other attacks in Symfony
  • Symfony2 improper IP based access control
  • Symfony XML decoding attack vector through external entities
  • Symfony has unsafe methods in the Request class
  • Symfony has a security issue when parsing the Authorization header
  • Symfony vulnerable to denial of service via a malicious HTTP Host header
  • Code injection in the way Symfony implements translation caching in FrameworkBundle
  • Webcache Poisoning in symfony/http-kernel
  • Symphony Vulnerable to PHP Code Injection via YAML Parsing
  • Symphony Denial of Service Via Overlong Usernames
  • Symfony vulnerable to command execution hijack on Windows with Process class
  • Symfony Authentication Bypass
  • Symfony Vulnerable to Timing Attack
  • Symfony Session Fixation Vulnerability
  • Symfony Incorrect Access Control
  • Symfony SSRF Vulnerability via Form Component
  • Firewall configured with unanimous strategy was not actually unanimous in Symfony
  • User enumeration leak using switch user functionality in Symfony
  • Improper Input Validation in Symfony
  • Symfony Incorrect Access Control
  • Symfony Host Header Injection vulnerability in the HttpFoundation component
  • Symfony CSRF Token Fixation
  • Symfony Arbitrary PHP code Execution
  • Symfony Open Redirect
  • Exceptions displayed in non-debug configurations in Symfony
  • Deserialization of untrusted data in Symfony
  • Symfony may allow a user to switch to using another user's identity
  • Symfony allows direct access of ESI URLs behind a trusted proxy
  • User enumeration in authentication mechanisms
  • Symfony Path Disclosure
  • Symfony HTTP Foundation web cache poisoning
  • Argument injection in a MimeTypeGuesser in Symfony
  • Symfony Service IDs Allow Injection
  • Prevent user enumeration using Guard or the new Authenticator-based Security
  • Symfony Http-Kernel has non-constant time comparison in UriSigner
  • Symfony Authentication Bypass
  • Symfony Session Fixation Vulnerability
  • Symfony Open Redirect
  • Symfony DoS
  • Symfony Cryptographic Vulnerability

proxy.golang.org: github.com/symfony/symfony

• Homepage:
• Documentation: https://pkg.go.dev/github.com/symfony/symfony#section-documentation
• Licenses: mit
• Latest release: v7.3.3+incompatible (published 8 days ago)
• Last Synced: 2025-09-04T12:35:54.542Z (1 day ago)
• Versions: 800
• Dependent Packages: 0
• Dependent Repositories: 1
• Rankings:
  • Forks count: 0.023%
  • Stargazers count: 0.048%
  • Average: 3.585%
  • Dependent repos count: 4.706%
  • Dependent packages count: 9.561%

packagist.org: linhecheng/cmlphp

The Symfony PHP framework

• Homepage: https://symfony.com
• Licenses: MIT
• Latest release: v7.3.3 (published 8 days ago)
• Last Synced: 2025-09-04T12:36:46.455Z (1 day ago)
• Versions: 858
• Dependent Packages: 1
• Dependent Repositories: 1
• Downloads: 669 Total
• Rankings:
  • Forks count: 0.004%
  • Stargazers count: 0.005%
  • Dependent packages count: 9.718%
  • Average: 11.537%
  • Dependent repos count: 21.866%
  • Downloads: 26.091%
• Maintainers (1)
  • tomorrowbetter
• Funding:
  • url: https://symfony.com/sponsor: type: custom
  • url: https://github.com/fabpot: type: github
  • url: https://github.com/nicolas-grekas: type: github
  • url: https://tidelift.com/funding/github/packagist/symfony/symfony: type: tidelift