PatchClock

PHP security digest · Packages

symfony/http-foundation security advisories

1 advisory we have followed since September 2026, 1 of them critical or high, newest first. Each page says who is affected, which versions fix it and how to check your project.

  1. High 27 Oct 2026

    Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header

    Fixed in 6.4.46, 7.4.19, 8.1.7, 5.4.54 · CVE-2026-108082

Check your project in one command

Composer compares your composer.lock with the public advisory databases:

composer audit

It lists every installed package with a known advisory, including symfony/http-foundation, and the version that fixes it.