symfony/framework-bundle

Provides a tight integration between Symfony components and the Symfony full-stack framework

Latest v8.1.9

Packagist

94%

Total Score

healthy

Frequent releases and active Symfony organization maintenance make this a well-supported release.

Are you affected? Scan for Free

Health Score Breakdown

Repo tooling

Composer build tooling is present. No security scanning tool was detected, but this is a limited hygiene gap and is outweighed by the repository's active maintenance and security policy.

Vulnerabilities

Title	Versions	Severity
CVE-2014-4931 symfony/framework-bundle is vulnerable to Improper Control of Generation of Code ('Code Injection') in versions 2.0.0 - 2.3.18, 2.4.0 - 2.4.8 and 2.5.0 - 2.5.2.	2.0.0 - 2.3.182.4.0 - 2.4.82.5.0 - 2.5.2	High
CVE-2022-23601 symfony/framework-bundle is vulnerable to Cross-Site Request Forgery (CSRF) in versions 5.3.14 - 5.3.14, 5.4.3 - 5.4.3 and 6.0.3 - 6.0.3.	5.3.14 - 5.3.145.4.3 - 5.4.36.0.3 - 6.0.3	High
CVE-2019-10909 symfony/framework-bundle is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 2.7.0 - 2.7.51, 2.8.0 - 2.8.50, 3.0.0 - 3.4.26, 4.0.0 - 4.1.12 and 4.2.0 - 4.2.7.	2.7.0 - 2.7.512.8.0 - 2.8.503.0.0 - 3.4.26 +2 more	Medium

Package versions

Maintainers

Fabien Potencier

Symfony Community

Direct Dependencies

Dependency	Last Release	Score
symfony/cache Version ^7.4\|^8.0	—	—
symfony/config Version ^7.4.4\|^8.0.4	—	—
symfony/finder Version ^7.4\|^8.0	—	—
symfony/routing Version ^7.4\|^8.0	—	—
symfony/filesystem Version ^7.4\|^8.0	—	—