composer

symfony/serializer

Security advisories for symfony/serializer, newest first. 2 known, all fixed. If you’re on 5.3.12 or later, none of them affect you.

RSS feed Check your lock file →

Latest version

8.1.10

Advisories

2 · 0 unfixed

Last advisory

15 Nov 2021

Safe from

5.3.12

2 advisories · newest first

MODERATE6.5 15 Nov 2021

CVE-2021-41270: Prevent CSV Injection via formulas

PKSA-s1hc-69wj-fhpp · CVE-2021-41270

Affected

≥ 4.1.0, < 4.4.35 ≥ 5.0.0, < 5.3.12

Fixed in

4.4.35 5.3.12

Published

15 Nov 2021

CRITICAL 24 Feb 2012

XML decoding attack vector through external entities

PKSA-ft85-yyfg-zynf

Affected

≥ 2.0.0, < 2.0.11

Fixed in

2.0.11

Published

24 Feb 2012

/advisories/composer/symfony/serializer/feed.rss

From Packagist and the GitHub advisory database · synced hourly

Same vendor

symfony/cache3 advisories symfony/dom-crawler1 advisory symfony/error-handler1 advisory symfony/expression-language1 advisory symfony/http-client2 advisories symfony/http-foundation15 advisories symfony/http-kernel8 advisories symfony/mailer1 advisory

Know when your sites are affected.

Porro reads composer.lock and package-lock from every site on your care plans and puts the ones that need you at the top. Updates arrive as pull requests.

Start your free trial →