Symfony — фреймворк c открытым исходным кодом, написанный на PHP.

Exceptions displayed in non-debug configurations in Symfony

Prevent cache poisoning via a Response Content-Type header in Symfony

Improper authentication in Symfony

Deserialization of untrusted data in Symfony

Improper Input Validation in Symfony

Symfony 2.0.X before 2.0.24, 2.1.X before 2.1.12, 2.2.X before 2.2.5, and 2.3.X before 2.3.3 have an issue in the HttpFoundation component. The Host header can be manipulated by an attacker when the framework is generating an absolute URL. A remote attacker could exploit this vulnerability to inject malicious content into the Web application page and conduct various attacks.

Invalid HTTP method overrides allow possible XSS or other attacks in Symfony

User enumeration leak using switch user functionality in Symfony

Argument injection in a MimeTypeGuesser in Symfony

Symfony Unsafe Cache Serialization Could Enable RCE