Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-10909
5.4
MEDIUMCVSS v3
Published
May 16, 2019
CVSS v2
3.5 LOW
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, validation messages are not escaped, which can lead to XSS when user input is included. This is related to symfony/framework-bundle.
symfony/symfony
GitHubThe Symfony PHP framework
GitHubThe Symfony PHP framework>= 4.2.0, < 4.2.7, >= 4.1.0, < 4.1.12, >= 3.4.0, < 3.4.26, >= 2.8.0, < 2.8.50, >= 2.7.0, < 2.7.51NVD
drupal/drupalGitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.>= 8.5.0, < 8.5.15, >= 8.6.0, < 8.6.15NVD
RubyGems
NPM