https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T01:26:11.579199+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-07864 bdu:2025-07864 2026-10-07T01:26:11.670193+00:00 bdu:2025-07864 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0948 certfr-2024-avi-0948 — De multiples vulnérabilités ont été découvertes dans les produits Symfony. Certaines d'entre elles permettent à un atta… 2026-10-07T01:26:11.670233+00:00 certfr-2024-avi-0948 https://cve.radiocsirt.org/vuln/euvd-2026-257745 EUVD-2026-257745 2026-10-07T01:26:11.670253+00:00 EUVD-2026-257745 https://cve.radiocsirt.org/vuln/fkie_cve-2024-50343 fkie_cve-2024-50343 2026-10-07T01:26:11.670265+00:00

symfony/validator is a module for the Symphony PHP framework which provides tools to validate values. It is possible to trick a `Validator` configured with a regular expression using the `$` metacharacters, with an input ending with `\n`. Symfony as of versions 5.4.43, 6.4.11, and 7.1.4 now uses the `D` regex modifier to match the entire input. Users are advised to upgrade. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-g3rh-rrhp-jhh9 GHSA-g3rh-rrhp-jhh9 — Symfony has an incorrect response from Validator when input ends with `\n` 2026-10-07T01:26:11.670294+00:00

Affected: Packagist: symfony/symfony, Packagist: symfony/validator

### Description

It is possible to trick a `Validator` configured with a regular expression using the `$` metacharacters, with an input ending with `\n`.

### Resolution

Symfony now uses the `D` regex modifier to match the entire input.

The patch for this issue is available [here](https://github.com/symfony/symfony/commit/7d1032bbead9a4229b32fa6ebca32681c80cb76f) for branch 5.4.

### Credits

We would like to thank Offscript for reporting the issue and Alexandre Daubois for providing the fix.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-50343 UBUNTU-CVE-2024-50343 2026-10-07T01:26:11.670328+00:00

Affected: Ubuntu:16.04:LTS: symfony, Ubuntu:Pro:18.04:LTS: symfony, Ubuntu:Pro:20.04:LTS: symfony, Ubuntu:Pro:22.04:LTS: symfony, Ubuntu:Pro:24.04:LTS: symfony, Ubuntu:25.10: symfony, Ubuntu:26.04:LTS: symfony

symfony/validator is a module for the Symphony PHP framework which provides tools to validate values. It is possible to trick a `Validator` configured with a regular expression using the `$` metacharacters, with an input ending with `\n`. Symfony as of versions 5.4.43, 6.4.11, and 7.1.4 now uses the `D` regex modifier to match the entire input. Users are advised to upgrade. There are no known workarounds for this vulnerability.