https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T21:13:18.944573+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2013-avi-468 certa-2013-avi-468 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Symfony</span>. Elles permettent à un attaquant… 2026-10-24T21:13:19.021476+00:00 certa-2013-avi-468 https://cve.radiocsirt.org/vuln/euvd-2026-107667 EUVD-2026-107667 2026-10-24T21:13:19.021528+00:00 EUVD-2026-107667 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4751 fkie_cve-2013-4751 2026-10-24T21:13:19.021552+00:00

php-symfony2-Validator has loss of information during serialization

 https://cve.radiocsirt.org/vuln/ghsa-q8j7-fjh7-25v5 GHSA-q8j7-fjh7-25v5 — Symfony collectionCascaded and collectionCascadedDeeply fields security bypass 2026-10-24T21:13:19.021592+00:00

Affected: Packagist: symfony/validator, Packagist: symfony/symfony

When using the Validator component, if `Symfony\\Component\\Validator\\Mapping\\Cache\\ApcCache` is enabled (or any other cache implementing `Symfony\\Component\\Validator\\Mapping\\Cache\\CacheInterface`), some information is lost during serialization (the `collectionCascaded` and the `collectionCascadedDeeply` fields).

As a consequence, arrays or traversable objects stored in fields using the `@Valid` constraint are not traversed by the validator as soon as the validator configuration is loaded from the cache.

 https://cve.radiocsirt.org/vuln/gsd-2013-4751 gsd-2013-4751 2026-10-24T21:13:19.021650+00:00 gsd-2013-4751