https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 23:45:52 +0000 https://cve.radiocsirt.org/vuln/cve-2024-28861 <p><strong>Affected:</strong> FriendsOfSymfony1 symfony1, friends_of_symfony_project fosuserbundle</p> <p>Symfony 1 is a community-driven fork of the 1.x branch of Symfony, a PHP framework for web projects. Starting in version 1.1.0 and prior to version 1.5.19, Symfony 1 has a gadget chain due to dangerous deserialization in `sfNamespacedParameterHolder` class that would enable an attacker to get remote code execution if a developer deserializes user input in their project. Version 1.5.19 contains a patch for the issue.</p> <p><strong>Affected:</strong> FriendsOfSymfony1 symfony1, friends_of_symfony_project fosuserbundle</p> <p>Symfony 1 is a community-driven fork of the 1.x branch of Symfony, a PHP framework for web projects. Starting in version 1.1.0 and prior to version 1.5.19, Symfony 1 has a gadget chain due to dangerous deserialization in `sfNamespacedParameterHolder` class that would enable an attacker to get remote code execution if a developer deserializes user input in their project. Version 1.5.19 contains a patch for the issue.</p> https://cve.radiocsirt.org/vuln/cve-2024-28861