symfony/http-kernel

Healthy and suitable to depend on. It has a long, active release history, current commits from multiple contributors, clear Symfony ownership, tests in the repository, and no deprecation or archive warning.

Latest v8.1.7

Packagist

95%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

100

Are you affected? Scan for Free

Health Score Breakdown

Repo tooling

Composer build tooling is present. No security-scanning tools were detected, which is a modest transparency gap, but it is outweighed by the project's active development and other governance signals.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-10879 symfony/http-kernel is vulnerable to Incorrect Authorization in versions 7.4.0 - 7.4.11 and 8.0.0 - 8.0.11.	7.4.0 - 7.4.118.0.0 - 8.0.11	Medium
CVE-2014-5245 symfony/http-kernel is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 2.0.0 - 2.3.19, 2.4.0 - 2.4.9 and 2.5.0 - 2.5.4.	2.0.0 - 2.3.192.4.0 - 2.4.92.5.0 - 2.5.4	High
CVE-2022-24894 symfony/http-kernel is vulnerable to Improper Authorization in versions 2.0.0 - 4.4.50, 5.0.0 - 5.4.20, 6.0.0 - 6.0.20, 6.1.0 - 6.1.12 and 6.2.0 - 6.2.6.	2.0.0 - 4.4.505.0.0 - 5.4.206.0.0 - 6.0.20 +2 more	Medium
CVE-2015-4050 symfony/http-kernel is vulnerable to Improper Access Control in versions 2.3.19 - 2.3.29, 2.5.4 - 2.5.12, 2.6.0 - 2.6.8 and 2.4.9 - 2.4.10.	2.3.19 - 2.3.292.4.9 - 2.4.102.5.4 - 2.5.12 +1 more	Medium
CVE-2019-18887 symfony/http-kernel is vulnerable to Observable Discrepancy in versions 2.2.0 - 2.8.52, 3.0.0 - 3.4.35, 4.0.0 - 4.2.12 and 4.3.0 - 4.3.8.	2.2.0 - 2.8.523.0.0 - 3.4.354.0.0 - 4.2.12 +1 more	High

Package versions

Maintainers

Fabien Potencier

Symfony Community

Direct Dependencies

Dependency	Last Release	Score
psr/log Version ^1\|^2\|^3	—	—
symfony/error-handler Version ^7.4\|^8.0	—	—
symfony/polyfill-ctype Version ^1.8	—	—
symfony/http-foundation Version ^7.4\|^8.0	—	—
symfony/event-dispatcher Version ^7.4\|^8.0	—	—