symfony/yaml
Healthy and suitable to depend on. It has a long, active release history, current repository activity across eight contributors, strong project backing, tests, release notes, and a security policy; the only notable gap is that no repository security-scanning tooling was detected.
95%
Total Score
100
100
94
100
Health checks
Composer build tooling is present, but no repository security-scanning tools were detected. This is a modest transparency gap, partially offset by the active project, tests, and published security policy.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-10866 symfony/yaml is vulnerable to Uncontrolled Recursion in versions 0.0.1 - 5.4.51, 6.0.0 - 6.4.39, 7.0.0 - 7.4.11 and 8.0.0 - 8.0.11. | 0.0.1 - 5.4.516.0.0 - 6.4.397.0.0 - 7.4.11 +1 more | Low |
AIKIDO-2026-10867 symfony/yaml is vulnerable to Resource Exhaustion in versions 0.0.1 - 5.4.51, 6.0.0 - 6.4.39, 7.0.0 - 7.4.11 and 8.0.0 - 8.0.11. | 0.0.1 - 5.4.516.0.0 - 6.4.397.0.0 - 7.4.11 +1 more | Low |
AIKIDO-2026-10868 symfony/yaml is vulnerable to Regular Expression Denial of Service (ReDoS) in versions 0.0.1 - 5.4.51, 6.0.0 - 6.4.39, 7.0.0 - 7.4.11 and 8.0.0 - 8.0.11. | 0.0.1 - 5.4.516.0.0 - 6.4.397.0.0 - 7.4.11 +1 more | Low |
Package versions
Maintainers
 Fabien Potencier |
| Symfony Community |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/polyfill-ctype Version ^1.8 | — | — |
Weekly Downloads
Info
- Last Published
- 18 days ago
- Created
- 14 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.