symfony/http-kernel (packagist) has 8 known vulnerabilities, the worst rated HIGH. Upgrade to 7.4.12 or later to clear all of them. No malicious-package signal is recorded.
Symfony's #[IsGranted('...')], #[IsSignatureValid], and #[IsCsrfTokenValid(...)] attributes allow you to define a methods: [...] argument to only enforce these…
// questionsIs symfony/http-kernel safe to install?
CyberXYZ does not call a package safe in absolute terms. It records 8 known vulnerabilities for symfony/http-kernel (packagist), the worst rated HIGH, and no malicious-package signal. Whether it is acceptable depends on the version you run.
Does symfony/http-kernel have known vulnerabilities?
Yes. CyberXYZ records 8 known vulnerabilities for symfony/http-kernel (packagist), the worst rated HIGH. These include GHSA-6439-2f28-8p8q, GHSA-wvjv-p5rr-mmqm, GHSA-q8hg-pf8v-cxrv, GHSA-754h-5r27-7x3r, GHSA-h7vf-5wrv-9fhv.
Which version of symfony/http-kernel should I use?
7.4.12 or later clears every advisory recorded for symfony/http-kernel (packagist). Check the release you pick before installing it.
How do I check symfony/http-kernel before installing?
Search symfony/http-kernel in CyberXYZ Check at https://cyberxyz.io/check?q=symfony%2Fhttp-kernel. The xyz Scanner checks a project's dependencies, and CyberXYZ Proxy checks each package as it is installed.
Checked 2026-11-14 at 06:52 UTC. The most recent advisory here was published 2026-05-27. Updated continuously from NVD, GHSA, OSV and CNA feeds.