symfony/security-http

Documentation and project coverage are strong, with tests, release notes, and a security policy. The package is organization-backed with broad recent contributor activity and no installation-time scripts.

Latest v8.1.8

Packagist

95%

Total Score

Maintainer Stability

100

Maturity

100

Supply Chain

100

Are you affected? Scan for Free

Health Score Breakdown

All health scores are okay.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-10998 symfony/security-http is vulnerable to Incorrect Authorization in versions 0.0.1 - 5.4.52, 6.0.0 - 6.4.40, 7.0.0 - 7.4.12 and 8.0.0 - 8.0.12.	0.0.1 - 5.4.526.0.0 - 6.4.407.0.0 - 7.4.12 +1 more	High
AIKIDO-2026-10878 symfony/security-http is vulnerable to Incorrect Authorization in versions 7.4.0 - 7.4.11 and 8.0.0 - 8.0.11.	7.4.0 - 7.4.118.0.0 - 8.0.11	Medium
AIKIDO-2026-10885 symfony/security-http is vulnerable to Insufficient Verification of Data Authenticity in versions 6.3.0 - 6.4.39, 7.4.0 - 7.4.11 and 8.0.0 - 8.0.11.	6.3.0 - 6.4.397.4.0 - 7.4.118.0.0 - 8.0.11	High
AIKIDO-2026-10884 symfony/security-http is vulnerable to Authentication Bypass by Spoofing in versions 7.1.0 - 7.4.11 and 8.0.0 - 8.0.11.	7.1.0 - 7.4.118.0.0 - 8.0.11	High
AIKIDO-2026-10887 symfony/security-http is vulnerable to Authentication Bypass by Spoofing in versions 0.0.1 - 5.4.51, 6.0.0 - 6.4.39, 7.0.0 - 7.4.11 and 8.0.0 - 8.0.11.	0.0.1 - 5.4.516.0.0 - 6.4.397.0.0 - 7.4.11 +1 more	High

Package versions

Maintainers

Fabien Potencier

Symfony Community

Direct Dependencies

Dependency	Last Release	Score
symfony/http-kernel Version ^8.1	—	—
symfony/security-core Version ^7.4\|^8.0	—	—
symfony/http-foundation Version ^7.4\|^8.0	—	—
symfony/property-access Version ^7.4\|^8.0	—	—
symfony/polyfill-mbstring Version ^1.0	—	—