https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T07:39:19.021758+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-00702 bdu:2020-00702 2026-10-15T07:39:19.026429+00:00 bdu:2020-00702 https://cve.radiocsirt.org/vuln/cnvd-2019-13250 cnvd-2019-13250 2026-10-15T07:39:19.026460+00:00 cnvd-2019-13250 https://cve.radiocsirt.org/vuln/euvd-2026-54027 EUVD-2026-54027 2026-10-15T07:39:19.026474+00:00 EUVD-2026-54027 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10913 fkie_cve-2019-10913 2026-10-15T07:39:19.026486+00:00

In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, HTTP Methods provided as verbs or using the override header may be treated as trusted input, but they are not validated, possibly causing SQL injection or XSS. This is related to symfony/http-foundation.

 https://cve.radiocsirt.org/vuln/ghsa-x92h-wmg2-6hp7 GHSA-x92h-wmg2-6hp7 — Invalid HTTP method overrides allow possible XSS or other attacks in Symfony 2026-10-15T07:39:19.026513+00:00

Affected: Packagist: symfony/http-foundation, Packagist: symfony/symfony

In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, HTTP Methods provided as verbs or using the override header may be treated as trusted input, but they are not validated, possibly causing SQL injection or XSS. This is related to symfony/http-foundation.

 https://cve.radiocsirt.org/vuln/gsd-2019-10913 gsd-2019-10913 2026-10-15T07:39:19.026543+00:00 gsd-2019-10913 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10913 UBUNTU-CVE-2019-10913 2026-10-15T07:39:19.026554+00:00

Affected: Ubuntu:16.04:LTS: symfony, Ubuntu:Pro:18.04:LTS: symfony

In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, HTTP Methods provided as verbs or using the override header may be treated as trusted input, but they are not validated, possibly causing SQL injection or XSS. This is related to symfony/http-foundation.