PatchTheCVEsymfony1 vulnerabilities and fixes
Recent CVEs affecting symfony1, with upgrade or downgrade steps. 2 tracked.
symfony1 has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-03-22. Highest priority: CVE-2024-28861 (score 63/100).
- CVE-2024-28861 CRITICAL 9.8 UPGRADE Symfony 1 is a community-driven fork of the 1.x branch of Symfony, a PHP framework for web projects
- CVE-2024-28859 MEDIUM 5.0 UPGRADE Symfony1 is a community fork of symfony 1.4 with DIC, form enhancements, latest Swiftmailer, better performanc
FAQ
How do I fix symfony1 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is symfony1 being exploited right now?
None of the tracked symfony1 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which symfony1 CVE should I patch first?
CVE-2024-28861 currently ranks highest (63/100): Symfony 1 is a community-driven fork of the 1.x branch of Symfony, a PHP framework for web projects.