symfony/runtime
The project has strong organizational backing and clear consumer documentation. The recent lack of commits is worth watching, but frequent releases and a fresh repository push show ongoing maintenance.
83%
Total Score
83
100
94
100
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last 3 months, a maintenance warning, though the frequent release history and recent push provide compensating evidence.
The repository uses Composer for builds, but no security scanning tools were detected; this is a modest transparency gap rather than evidence of abandonment.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2026-47767 symfony/runtime is vulnerable to Improper Input Validation in versions 5.4.46 - 5.4.52, 6.4.14 - 6.4.40, 7.1.7 - 7.4.12 and 8.0.0 - 8.0.12. | 5.4.46 - 5.4.526.4.14 - 6.4.407.1.7 - 7.4.12 +1 more | Medium |
AIKIDO-2026-10889 symfony/runtime is vulnerable to Interpretation Conflict in versions 5.4.46 - 5.4.51, 6.4.14 - 6.4.39, 7.1.7 - 7.4.11 and 8.0.0 - 8.0.11. | 5.4.46 - 5.4.516.4.14 - 6.4.397.1.7 - 7.4.11 +1 more | High |
CVE-2024-50340 symfony/runtime is vulnerable to Improper Input Validation in versions 5.3.0 - 5.4.46, 6.0.0 - 6.4.14 and 7.0.0 - 7.1.7. | 5.3.0 - 5.4.466.0.0 - 6.4.147.0.0 - 7.1.7 | High |
Package versions
Maintainers
 Nicolas Grekas |
| Symfony Community |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.