Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

ux — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in ux, with AI-generated Chinese analysis, references, and POCs.

Vendor: symfony

CVE ID Title CVSS Severity Published
CVE-2026-49215 Symfony UX: CSRF Protection Bypass in symfony/ux-live-component — Accept Header is CORS-Safelisted CWE-352 - - 2026-07-17
CVE-2026-49216 Symfony UX: XSS in symfony/ux-autocomplete via unescaped AJAX response data CWE-79 - - 2026-07-17
CVE-2026-49211 Symfony UX: Information exposure via unescaped LIKE wildcards in EntitySearchUtil CWE-200 - - 2026-07-17
CVE-2026-49208 Symfony UX: Format-less date LiveProps parsed with the permissive DateTime constructor CWE-20 - - 2026-07-17
CVE-2026-49210 Symfony UX: XSS in symfony/ux-live-component via attacker-controlled child component tag CWE-79 - - 2026-07-17
CVE-2026-49212 Symfony UX: LiveComponentHydrator HMAC checksum lacks component and slot binding CWE-345 - - 2026-07-17
CVE-2026-49209 Symfony UX: Denial of service in symfony/ux-live-component via unbounded batch action requests CWE-770 - - 2026-07-17
CVE-2026-55877 Symfony UX: XSS in symfony/ux-icons via unsanitized SVG content in local files and Iconify on-demand responses CWE-79 6.1 Medium 2026-07-08
CVE-2026-55878 Symfony: Path Traversal in symfony/ux-toolkit Allows Arbitrary File Write and Read via Crafted Recipe Manifest CWE-22 7.8 High 2026-07-08
CVE-2025-47946 symfony/ux-live-component and symfony/ux-twig-component vulnerable to unsanitized HTML attribute injection via ComponentAttributes CWE-79 6.1 Medium 2025-05-19

All 10 known CVE vulnerabilities affecting ux with full Chinese analysis, references, and POCs where available.