composer

symfony/cache

Security advisories for symfony/cache, newest first. 3 known, all fixed. If you’re on 8.0.12 or later, none of them affect you.

RSS feed Check your lock file →

Latest version

8.1.10

Advisories

3 · 0 unfixed

Last advisory

20 May 2026

Safe from

8.0.12

3 advisories · newest first

MODERATE 20 May 2026

CVE-2026-45073: SQL Injection in PdoAdapter::doClear() via Unsanitized $prefix

PKSA-z7t6-zt6p-wtng · CVE-2026-45073

Affected

≥ 2.0.0, < 5.4.52 ≥ 6.0.0, < 6.4.40 ≥ 7.0.0, < 7.4.12

and 1 more

≥ 8.0.0, < 8.0.12

Fixed in

5.4.52 6.4.40 7.4.12

and 1 more

8.0.12

Published

20 May 2026

CRITICAL9.8 13 Nov 2019

CVE-2019-18889: Forbid serializing AbstractAdapter and TagAwareAdapter instances

PKSA-w17b-j6zx-knvn · CVE-2019-18889

Affected

≥ 3.1.0, < 3.4.35 ≥ 4.0.0, < 4.2.12 ≥ 4.3.0, < 4.3.8

Fixed in

3.4.35 4.2.12 4.3.8

Published

13 Nov 2019

HIGH7.1 16 Apr 2019

CVE-2019-10912: Prevent destructors with side-effects from being unserialized

PKSA-y75j-trtt-wgfj · CVE-2019-10912

Affected

≥ 3.1.0, < 3.4.26 ≥ 4.0.0, < 4.1.12 ≥ 4.2.0, < 4.2.7

Fixed in

3.4.26 4.1.12 4.2.7

Published

16 Apr 2019

/advisories/composer/symfony/cache/feed.rss

From Packagist and the GitHub advisory database · synced hourly

Same vendor

symfony/dom-crawler1 advisory symfony/error-handler1 advisory symfony/expression-language1 advisory symfony/http-client2 advisories symfony/http-foundation15 advisories symfony/http-kernel8 advisories symfony/mailer1 advisory

Know when your sites are affected.

Porro reads composer.lock and package-lock from every site on your care plans and puts the ones that need you at the top. Updates arrive as pull requests.

Start your free trial →