symfony/http-client

Healthy and suitable to depend on. It has frequent releases, active contributions from 11 maintainers, clear licensing, tests, and organizational backing; the only notable gap is that no repository security scanning tools were detected.

Latest v8.1.7

Packagist

96%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

100

Are you affected? Scan for Free

Health Score Breakdown

Repo tooling

Composer is used as a build tool, but no security scanning tools were detected; this is a transparency gap, though the repository still has a security policy and strong maintenance evidence.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-10964 symfony/http-client is vulnerable to Server-Side Request Forgery (SSRF) in versions 5.4.0 - 5.4.52.	5.4.0 - 5.4.52	Medium
CVE-2024-50342 symfony/http-client is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 4.3.0 - 5.4.47, 6.0.0 - 6.4.15 and 7.0.0 - 7.1.8.	4.3.0 - 5.4.476.0.0 - 6.4.157.0.0 - 7.1.8	Low

Package versions

Maintainers

Nicolas Grekas

Symfony Community

Direct Dependencies

Dependency	Last Release	Score
psr/log Version ^1\|^2\|^3	—	—
symfony/service-contracts Version ^2.5\|^3	—	—
symfony/deprecation-contracts Version ^2.5\|^3.0	—	—
symfony/http-client-contracts Version ^3.7	—	—