composer

symfony/var-exporter

Security advisories for symfony/var-exporter, newest first. 1 known, all fixed. If you’re on 4.3.8 or later, none of them affect you.

RSS feed Check your lock file →

Latest version

8.1.10

Advisories

1 · 0 unfixed

Last advisory

13 Nov 2019

Safe from

4.3.8

1 advisory · newest first

CRITICAL9.8 13 Nov 2019

CVE-2019-11325: Fix escaping of strings in VarExporter

PKSA-qdcz-9b22-7g4s · CVE-2019-11325

Affected

≥ 4.2.0, < 4.2.12 ≥ 4.3.0, < 4.3.8

Fixed in

4.2.12 4.3.8

Published

13 Nov 2019

/advisories/composer/symfony/var-exporter/feed.rss

From Packagist and the GitHub advisory database · synced hourly

Same vendor

symfony/cache3 advisories symfony/dom-crawler1 advisory symfony/error-handler1 advisory symfony/expression-language1 advisory symfony/http-client2 advisories symfony/http-foundation15 advisories symfony/http-kernel8 advisories symfony/mailer1 advisory

Know when your sites are affected.

Porro reads composer.lock and package-lock from every site on your care plans and puts the ones that need you at the top. Updates arrive as pull requests.

Start your free trial →