Package Health/symfony/ux-live-component

symfony/ux-live-component

The package includes tests, a changelog, a clear license, and a security policy. Its organization-backed repository has nine active contributors, while the lack of repository security scanning is a minor transparency gap.

Latest v3.5.1

Packagist

91%

Total Score

Maintainer Stability

100

Maturity

Supply Chain

100

Are you affected? Scan for Free

Health Score Breakdown

Repo tooling

Composer build tooling is present, but no security-scanning tooling was detected. That is a minor process gap, partly offset by the repository's security policy and active maintenance.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-11076 symfony/ux-live-component is vulnerable to Insufficient Verification of Data Authenticity in versions 2.8.0 - 2.35.0 and 3.0.0 - 3.0.0.	2.8.0 - 2.35.03.0.0 - 3.0.0	Low
AIKIDO-2026-11065 symfony/ux-live-component is vulnerable to Cross-Site Request Forgery (CSRF) in versions 2.22.0 - 2.35.0 and 3.0.0 - 3.0.0.	2.22.0 - 2.35.03.0.0 - 3.0.0	Low
AIKIDO-2026-11067 symfony/ux-live-component is vulnerable to Improper Input Validation in versions 2.8.0 - 2.35.0 and 3.0.0 - 3.0.0.	2.8.0 - 2.35.03.0.0 - 3.0.0	Low
AIKIDO-2026-11073 symfony/ux-live-component is vulnerable to Denial of Service in versions 2.5.0 - 2.35.0 and 3.0.0 - 3.0.0.	2.5.0 - 2.35.03.0.0 - 3.0.0	Low
AIKIDO-2026-11074 symfony/ux-live-component is vulnerable to Cross Site Scripting (XSS) in versions 2.8.0 - 2.35.0 and 3.0.0 - 3.0.0.	2.8.0 - 2.35.03.0.0 - 3.0.0	Medium

Package versions

Maintainers

Symfony Community

Direct Dependencies

Dependency	Last Release	Score
twig/twig Version ^3.10.3\|^4.0	—	—
symfony/type-info Version ^7.4\|^8.0	—	—
symfony/property-info Version ^7.4\|^8.0	—	—
symfony/property-access Version ^7.4\|^8.0	—	—
symfony/stimulus-bundle Version ^2.9\|^3.0	—	—