symfony/security-core

Healthy and suitable to depend on. It has a long release history, frequent recent releases, active contributors, a current unarchived repository, and clear tests, licensing, and release notes; no material maintenance or transparency concern is evident.

Latest v8.1.6

Packagist

96%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

100

Supply Chain

100

Are you affected? Scan for Free

Health Score Breakdown

All health scores are okay.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-656715 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. symfony/security-core is vulnerable to Deserialization of Untrusted Data in versions 6.0.0 - 6.4.41, 7.0.0 - 7.4.13, 8.0.0 - 8.0.13 and 8.1.0 - 8.1.0.	6.0.0 - 6.4.417.0.0 - 7.4.138.0.0 - 8.0.13 +1 more	Medium
AIKIDO-2026-11002 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. symfony/security-core is vulnerable to Deserialization of Untrusted Data in versions 6.4.0 - 6.4.40, 7.4.0 - 7.4.12 and 8.0.0 - 8.0.12.	6.4.0 - 6.4.407.4.0 - 7.4.128.0.0 - 8.0.12	Medium
CVE-2017-11365 symfony/security-core is vulnerable to Improper Access Control in versions 2.7.30 - 2.7.32, 2.8.23 - 2.8.25, 3.2.10 - 3.2.12 and 3.3.3 - 3.3.5.	2.7.30 - 2.7.322.8.23 - 2.8.253.2.10 - 3.2.12 +1 more	Critical
CVE-2016-1902 symfony/security-core is vulnerable to Insufficient Entropy in PRNG in versions 2.4.0 - 2.6.13 and 2.7.0 - 2.7.9.	2.4.0 - 2.6.132.7.0 - 2.7.9	High
CVE-2018-11407 symfony/security-core is vulnerable to Improper Authentication in versions 2.8.0 - 2.8.37, 3.0.0 - 3.3.17, 3.4.0 - 3.4.7 and 4.0.0 - 4.0.7.	2.8.0 - 2.8.373.0.0 - 3.3.173.4.0 - 3.4.7 +1 more	Critical

Package versions

Maintainers

Fabien Potencier

Symfony Community

Direct Dependencies

Dependency	Last Release	Score
symfony/password-hasher Version ^7.4\|^8.0	—	—
symfony/service-contracts Version ^2.5\|^3	—	—
symfony/event-dispatcher-contracts Version ^2.5\|^3	—	—