p PatchFirst

PatchFirst · Latest vulnerabilities

symfony/error-handler vulnerabilities

Vulnerabilities published for symfony/error-handler in the last 30 days: 0. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 1

  1. CVE-2020-5274

    Medium · CVSS 4.6EPSS 1.2%Fix available

    Exceptions displayed in non-debug configurations in Symfony

    In Symfony before versions 5.0.5 and 4.4.5, some properties of the Exception were not properly escaped when the `ErrorHandler` rendered it stacktrace. In addition, the stacktrace were displayed even in a non-debug configuration. The ErrorHandler now escape alls properties of the exception, and the stacktrace is only display in debug configuration. This issue is patched in symfony/http-foundation versions 4.4.5 and 5.0.5

    • Update to 4.4.4
    • Update to 5.0.4
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →