Symfony DomCrawler XXE Vulnerability via DOMDocument ValidateOnParse (CVE-2026-45071)

github.com 2026-07-15查看中文 →

Security AdvisoryCVE-2026-45071LowSymfony

Affected:

symfony/dom-crawler <5.4.52
symfony/dom-crawler >=6 <6.4.40
symfony/dom-crawler >=7 <7.4.12
symfony/dom-crawler >=8 <8.0.12
symfony/symfony <5.4.52

Fixed in:

symfony/dom-crawler 5.4.52
symfony/dom-crawler 6.4.40
symfony/dom-crawler 7.4.12
symfony/dom-crawler 8.0.12
symfony/symfony 5.4.52

Referenced CVEs: CVE-2026-45071

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Tabby Electron Path Traversal Vulnerability in SFTP Context Menus and Fix 2026-08-11 Tabby SFTP Path Traversal Vulnerability Advisory and Fix Details 2026-08-11 XSS in Vue SQText Component due to Unsanitized TinyMCE Output via v-html 2026-08-11 SQLBot SQText Dashboard Component Stored XSS Vulnerability via v-html 2026-08-11 Firecrawl patches SSRF/RCE risk by replacing json-schema-ref-parser with internal Sref parser 2026-08-11

Offline Archive

Offline screenshot & PDF are Pro-exclusive