registry.itservicenet.net/secure-container/its-nextcloud-enterprise:v30.0.17.14-zero-cve (wolfi 20230201) - Trivy Report - 2026-10-25 04:04:54.498702929 +0000 UTC m=+0.071633409

wolfi
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
ca-certificates	CVE-2026-111943	HIGH	20260909-r1	20260909-r3	http://www.openwall.com/lists/oss-security/2026/10/20/29 https://access.redhat.com/errata/RHSA-2026:86196 https://access.redhat.com/errata/RHSA-2026:88354 https://access.redhat.com/security/cve/CVE-2026-111943 https://bugzilla.redhat.com/2548336 https://bugzilla.redhat.com/2548344 https://bugzilla.redhat.com/2556068 https://bugzilla.redhat.com/show_bug.cgi?id=2548334 https://bugzilla.redhat.com/show_bug.cgi?id=2548336 https://bugzilla.redhat.com/show_bug.cgi?id=2548344 https://bugzilla.redhat.com/show_bug.cgi?id=2556068 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111943 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78667 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78669 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97031 https://errata.almalinux.org/9/ALSA-2026-88354.html https://errata.rockylinux.org/RLSA-2026:86196 https://github.com/golang/go/issues/82345 https://go.dev/cl/851047 https://go.dev/issue/82345 https://groups.google.com/g/golang-announce/c/66pojueaQek https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU https://linux.oracle.com/cve/CVE-2026-111943.html https://linux.oracle.com/errata/ELSA-2026-88354.html https://nvd.nist.gov/vuln/detail/CVE-2026-111943 https://pkg.go.dev/vuln/GO-2026-6809 https://www.cve.org/CVERecord?id=CVE-2026-111943
curl	CVE-2026-92392	HIGH	8.22.0-r3	8.23.0-r0	http://www.openwall.com/lists/oss-security/2026/10/18/5 http://www.openwall.com/lists/oss-security/2026/10/18/6 https://access.redhat.com/security/cve/CVE-2026-92392 https://curl.se/docs/CVE-2026-92392.html https://curl.se/docs/CVE-2026-92392.json https://hackerone.com/reports/4030333 https://nvd.nist.gov/vuln/detail/CVE-2026-92392 https://ubuntu.com/security/notices/USN-8927-1 https://ubuntu.com/security/notices/USN-8927-2 https://www.cve.org/CVERecord?id=CVE-2026-92392
glibc-2.44	CVE-2026-8674	MEDIUM	2.44-r6	2.44-r8	http://www.openwall.com/lists/oss-security/2026/09/17/4 https://access.redhat.com/errata/RHSA-2026:84753 https://access.redhat.com/security/cve/CVE-2026-8674 https://bugzilla.redhat.com/2523274 https://bugzilla.redhat.com/2524870 https://bugzilla.redhat.com/2525256 https://bugzilla.redhat.com/2536382 https://bugzilla.redhat.com/show_bug.cgi?id=2523274 https://bugzilla.redhat.com/show_bug.cgi?id=2524870 https://bugzilla.redhat.com/show_bug.cgi?id=2525256 https://bugzilla.redhat.com/show_bug.cgi?id=2536382 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18374 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-77117 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80489 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8674 https://errata.almalinux.org/10/ALSA-2026-84753.html https://errata.rockylinux.org/RLSA-2026:84753 https://joshua.hu/fuzzing-glibc-libresolv https://nvd.nist.gov/vuln/detail/CVE-2026-8674 https://sourceware.org/bugzilla/show_bug.cgi?id=31026 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0021 https://sourceware.org/git/?p=glibc.git;a=commit;h=506ea57086bfb9ce3daff1c14246a1cb532aba0a https://www.cve.org/CVERecord?id=CVE-2026-8674
glibc-2.44	CVE-2026-86805	MEDIUM	2.44-r6	2.44-r8	https://access.redhat.com/security/cve/CVE-2026-86805 https://nvd.nist.gov/vuln/detail/CVE-2026-86805 https://sourceware.org/bugzilla/show_bug.cgi?id=34360 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0022 https://www.cve.org/CVERecord?id=CVE-2026-86805
glibc-2.44	CVE-2026-89092	MEDIUM	2.44-r6	2.44-r8	http://www.openwall.com/lists/oss-security/2026/09/11/2 https://access.redhat.com/security/cve/CVE-2026-89092 https://nvd.nist.gov/vuln/detail/CVE-2026-89092 https://sourceware.org/bugzilla/show_bug.cgi?id=34624 https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0016 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0016 https://www.cve.org/CVERecord?id=CVE-2026-89092
glibc-2.44	CVE-2026-95818	MEDIUM	2.44-r6	2.44-r8	https://access.redhat.com/security/cve/CVE-2026-95818 https://nvd.nist.gov/vuln/detail/CVE-2026-95818 https://sourceware.org/bugzilla/show_bug.cgi?id=34360 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0023 https://www.cve.org/CVERecord?id=CVE-2026-95818
perl	CVE-2026-82560	UNKNOWN	5.44.0-r1	5.44.0-r2	http://www.openwall.com/lists/oss-security/2026/09/19/6 https://github.com/rra/podlators/commit/70510174f69eb54aa6d617bde4e1402cd9b7c61f.patch https://metacpan.org/release/RRA/podlators-v6.1.0/source/lib/Pod/Text.pm#L245-261 https://metacpan.org/release/RRA/podlators-v6.1.1/changes
php-8.3	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87151 https://access.redhat.com/security/cve/CVE-2026-109618 https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87151 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87151 https://access.redhat.com/security/cve/CVE-2026-109619 https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87151 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
No Misconfigurations found
node-pkg
No Vulnerabilities found
No Misconfigurations found
composer-vendor
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
guzzlehttp/guzzle	CVE-2026-69246	HIGH	7.8.2	7.15.2, 8.0.1	https://github.com/guzzle/guzzle https://github.com/guzzle/guzzle/commit/3aeea0406aab88cbbd86531313d7cebf8ae149a4 https://github.com/guzzle/guzzle/commit/744101956d78b7c1384d0cbf379db13e859167bf https://github.com/guzzle/guzzle/pull/3907 https://github.com/guzzle/guzzle/pull/3908 https://github.com/guzzle/guzzle/releases/tag/7.15.2 https://github.com/guzzle/guzzle/releases/tag/8.0.1 https://github.com/guzzle/guzzle/security/advisories/GHSA-v5mv-p594-2x33
guzzlehttp/guzzle	CVE-2026-55568	MEDIUM	7.8.2	7.12.1	https://github.com/guzzle/guzzle https://github.com/guzzle/guzzle/security/advisories/GHSA-wpwq-4j6v-78m3
guzzlehttp/guzzle	CVE-2026-55767	MEDIUM	7.8.2	7.12.1	https://github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/guzzle/CVE-2026-55767.yaml https://github.com/guzzle/guzzle https://github.com/guzzle/guzzle/commit/7f537cded1912349abf5081258d6db19106d774d https://github.com/guzzle/guzzle/pull/3653 https://github.com/guzzle/guzzle/releases/tag/7.12.1 https://github.com/guzzle/guzzle/security/advisories/GHSA-cwxw-98qj-8qjx https://nvd.nist.gov/vuln/detail/CVE-2026-55767
guzzlehttp/guzzle	CVE-2026-59883	MEDIUM	7.8.2	7.12.3	https://access.redhat.com/security/cve/CVE-2026-59883 https://github.com/guzzle/guzzle https://github.com/guzzle/guzzle/commit/b9944c161b12d9ee9c9334cfc5b9659ecd7451f8 https://github.com/guzzle/guzzle/pull/3694 https://github.com/guzzle/guzzle/releases/tag/7.12.3 https://github.com/guzzle/guzzle/security/advisories/GHSA-g446-98w2-8p5w https://nvd.nist.gov/vuln/detail/CVE-2026-59883 https://www.cve.org/CVERecord?id=CVE-2026-59883
guzzlehttp/guzzle	CVE-2026-67339	MEDIUM	7.8.2	7.14.2	https://access.redhat.com/security/cve/CVE-2026-67339 https://github.com/guzzle/guzzle https://github.com/guzzle/guzzle/commit/9e4580d4b9981e903dc6323fe37f50a96e85b05e https://github.com/guzzle/guzzle/pull/3876 https://github.com/guzzle/guzzle/releases/tag/7.14.2 https://github.com/guzzle/guzzle/security/advisories/GHSA-94pj-82f3-465w https://nvd.nist.gov/vuln/detail/CVE-2026-67339 https://www.cve.org/CVERecord?id=CVE-2026-67339 https://www.vulncheck.com/advisories/guzzlehttp-guzzle-before-proxy-authorization-header-disclosure
guzzlehttp/guzzle	CVE-2026-67353	MEDIUM	7.8.2	7.15.1	https://access.redhat.com/security/cve/CVE-2026-67353 https://github.com/guzzle/guzzle https://github.com/guzzle/guzzle/commit/7b68220d6543f6f80fe62e633361fc9d4ead14d4 https://github.com/guzzle/guzzle/pull/3901 https://github.com/guzzle/guzzle/releases/tag/7.15.1 https://github.com/guzzle/guzzle/security/advisories/GHSA-f283-ghqc-fg79 https://nvd.nist.gov/vuln/detail/CVE-2026-67353 https://www.cve.org/CVERecord?id=CVE-2026-67353 https://www.vulncheck.com/advisories/guzzlehttp-guzzle-before-unbounded-cookie-denial-of-service
guzzlehttp/guzzle	CVE-2026-67354	MEDIUM	7.8.2	7.15.1	https://access.redhat.com/security/cve/CVE-2026-67354 https://github.com/guzzle/guzzle https://github.com/guzzle/guzzle/commit/7b68220d6543f6f80fe62e633361fc9d4ead14d4 https://github.com/guzzle/guzzle/pull/3901 https://github.com/guzzle/guzzle/releases/tag/7.15.1 https://github.com/guzzle/guzzle/security/advisories/GHSA-h95v-h523-3mw8 https://nvd.nist.gov/vuln/detail/CVE-2026-67354 https://www.cve.org/CVERecord?id=CVE-2026-67354 https://www.vulncheck.com/advisories/guzzlehttp-guzzle-before-uri-fragment-disclosure-via-referer
guzzlehttp/guzzle	CVE-2026-67355	MEDIUM	7.8.2	7.15.1	https://access.redhat.com/security/cve/CVE-2026-67355 https://github.com/guzzle/guzzle https://github.com/guzzle/guzzle/commit/7b68220d6543f6f80fe62e633361fc9d4ead14d4 https://github.com/guzzle/guzzle/pull/3901 https://github.com/guzzle/guzzle/releases/tag/7.15.1 https://github.com/guzzle/guzzle/security/advisories/GHSA-wm3w-8rrp-j577 https://nvd.nist.gov/vuln/detail/CVE-2026-67355 https://www.cve.org/CVERecord?id=CVE-2026-67355 https://www.vulncheck.com/advisories/guzzlehttp-guzzle-before-host-only-cookie-scope
guzzlehttp/guzzle	CVE-2026-69245	MEDIUM	7.8.2	7.15.2, 8.0.1	https://github.com/guzzle/guzzle https://github.com/guzzle/guzzle/commit/3aeea0406aab88cbbd86531313d7cebf8ae149a4 https://github.com/guzzle/guzzle/commit/744101956d78b7c1384d0cbf379db13e859167bf https://github.com/guzzle/guzzle/pull/3907 https://github.com/guzzle/guzzle/pull/3908 https://github.com/guzzle/guzzle/releases/tag/7.15.2 https://github.com/guzzle/guzzle/releases/tag/8.0.1 https://github.com/guzzle/guzzle/security/advisories/GHSA-f7vp-7xgx-4w4r
guzzlehttp/psr7	CVE-2026-48998	MEDIUM	2.7.0	2.10.2	https://access.redhat.com/security/cve/CVE-2026-48998 https://github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/psr7/CVE-2026-48998.yaml https://github.com/guzzle/psr7 https://github.com/guzzle/psr7/security/advisories/GHSA-34xg-wgjx-8xph https://nvd.nist.gov/vuln/detail/CVE-2026-48998 https://www.cve.org/CVERecord?id=CVE-2026-48998
guzzlehttp/psr7	CVE-2026-49214	MEDIUM	2.7.0	2.10.2	https://github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/psr7/CVE-2026-49214.yaml https://github.com/guzzle/psr7 https://github.com/guzzle/psr7/security/advisories/GHSA-hq7v-mx3g-29hw https://nvd.nist.gov/vuln/detail/CVE-2026-49214
guzzlehttp/psr7	CVE-2026-55766	MEDIUM	2.7.0	2.12.1	https://github.com/guzzle/psr7 https://github.com/guzzle/psr7/security/advisories/GHSA-vm85-hxw5-5432
guzzlehttp/psr7	CVE-2026-59882	MEDIUM	2.7.0	2.12.3	https://github.com/guzzle/psr7 https://github.com/guzzle/psr7/commit/ddd64f17d4cc1f7e5ffe6fd2c989ec7221712580 https://github.com/guzzle/psr7/pull/811 https://github.com/guzzle/psr7/releases/tag/2.12.3 https://github.com/guzzle/psr7/security/advisories/GHSA-c2w2-prh8-qm98 https://nvd.nist.gov/vuln/detail/CVE-2026-59882
mtdowling/jmespath.php	CVE-2026-54133	CRITICAL	2.8.0	2.9.1	https://github.com/FriendsOfPHP/security-advisories/blob/master/mtdowling/jmespath.php/CVE-2026-54133.yaml https://github.com/jmespath/jmespath.php https://github.com/jmespath/jmespath.php/security/advisories/GHSA-pcw8-m77r-2528 https://nvd.nist.gov/vuln/detail/CVE-2026-54133
phpseclib/phpseclib	CVE-2026-44167	HIGH	2.0.53	1.0.29, 2.0.54, 3.0.52	https://github.com/phpseclib/phpseclib https://github.com/phpseclib/phpseclib/commit/d53d2021bcb9f6a04d5d44ec99e6bbef219a71bc https://github.com/phpseclib/phpseclib/security/advisories/GHSA-3qpq-r242-jqj7 https://nvd.nist.gov/vuln/detail/CVE-2026-44167 https://ubuntu.com/security/notices/USN-8830-1 https://www.cve.org/CVERecord?id=CVE-2026-44167
phpseclib/phpseclib	CVE-2026-55599	MEDIUM	2.0.53	1.0.30, 2.0.55, 3.0.54	https://github.com/phpseclib/phpseclib https://github.com/phpseclib/phpseclib/security/advisories/GHSA-m557-wrgg-6rp4 https://nvd.nist.gov/vuln/detail/CVE-2026-55599
phpseclib/phpseclib	CVE-2026-84308	MEDIUM	2.0.53	3.0.57, 4.0.1	https://github.com/phpseclib/phpseclib https://github.com/phpseclib/phpseclib/commit/fb56bc5bb9009b54a6c26b31aeec8ed944f17373 https://github.com/phpseclib/phpseclib/releases/tag/3.0.57 https://github.com/phpseclib/phpseclib/releases/tag/4.0.1 https://github.com/phpseclib/phpseclib/security/advisories/GHSA-q97c-8qh3-fpc6 https://nvd.nist.gov/vuln/detail/CVE-2026-84308
symfony/dom-crawler	CVE-2026-45071	HIGH	v6.4.4	4.0.0, 5.3.0, 6.2.0, 6.3.0, 7.2.0, 7.4.12, 8.0.12, 3.0.0, 5.0.0, 5.1.0, 5.4.0, 6.1.0, 6.4.0, 7.1.0, 7.4.0, 5.2.0, 5.4.52, 6.4.40, 7.3.0	https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/dom-crawler/CVE-2026-45071.yaml https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2026-45071.yaml https://github.com/symfony/symfony https://github.com/symfony/symfony/commit/eea5fd7488cbdc241da4ce242344b7d9a3ecdf3d https://github.com/symfony/symfony/releases/tag/v5.4.52 https://github.com/symfony/symfony/releases/tag/v6.4.40 https://github.com/symfony/symfony/releases/tag/v7.4.12 https://github.com/symfony/symfony/releases/tag/v8.0.12 https://github.com/symfony/symfony/security/advisories/GHSA-x6g4-fwcc-jj8w https://symfony.com/cve-2026-45071
symfony/http-foundation	CVE-2026-48736	HIGH	v6.4.29	7.4.0, 7.4.13, 8.0.13, 6.4.41, 7.1.0, 7.2.0, 7.3.0	https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-client/CVE-2026-48736.yaml https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-foundation/CVE-2026-48736.yaml https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2026-48736.yaml https://github.com/symfony/symfony https://github.com/symfony/symfony/commit/82765368cf74177c36613575182f168a2eb765b2 https://github.com/symfony/symfony/commit/85b831555be8ea1f43bf01078afe87bc4c92f65e https://github.com/symfony/symfony/releases/tag/v5.4.53 https://github.com/symfony/symfony/releases/tag/v6.4.41 https://github.com/symfony/symfony/releases/tag/v7.4.13 https://github.com/symfony/symfony/security/advisories/GHSA-38cx-cq6f-5755 https://symfony.com/cve-2026-48736
symfony/http-foundation	CVE-2026-108082	UNKNOWN	v6.4.29	6.1.0, 6.2.0, 6.4.0, 8.1.0, 8.1.7, 5.4.54, 6.3.0, 6.4.46, 7.1.0, 7.2.0, 7.3.0, 7.4.0, 7.4.19	https://github.com/symfony/symfony/pull/66048 https://github.com/symfony/symfony/pull/66491 https://github.com/symfony/symfony/security/advisories/GHSA-r925-mgvr-h9cc https://symfony.com/blog/cve-2026-108082-redos-in-headerutils-split-reachable-through-the-cache-control-request-header https://symfony.com/cve-2026-108082
symfony/mailer	CVE-2026-45068	HIGH	v6.4.18	5.3.0, 6.4.40, 3.0.0, 7.2.0, 7.3.0, 5.4.0, 5.4.52, 6.1.0, 6.4.0, 7.4.12, 8.0.12, 4.0.0, 5.0.0, 5.1.0, 5.2.0, 6.2.0, 6.3.0, 7.1.0, 7.4.0	https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/mailer/CVE-2026-45068.yaml https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2026-45068.yaml https://github.com/symfony/symfony https://github.com/symfony/symfony/commit/c45144862dc289d03952f41f6078174089a3afc6 https://github.com/symfony/symfony/releases/tag/v5.4.52 https://github.com/symfony/symfony/releases/tag/v6.4.40 https://github.com/symfony/symfony/releases/tag/v7.4.12 https://github.com/symfony/symfony/releases/tag/v8.0.12 https://github.com/symfony/symfony/security/advisories/GHSA-xx3c-qf5g-hc39 https://symfony.com/cve-2026-45068
symfony/mime	CVE-2026-45067	HIGH	v6.4.18	4.0.0, 5.3.0, 6.1.0, 7.1.0, 7.2.0, 7.3.0, 8.0.12, 5.0.0, 6.2.0, 6.4.0, 7.4.0, 7.4.12, 5.1.0, 5.2.0, 3.0.0, 5.4.0, 5.4.52, 6.3.0, 6.4.40	https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/mime/CVE-2026-45067.yaml https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2026-45067.yaml https://github.com/symfony/symfony https://github.com/symfony/symfony/commit/a1c42cbe517bc146a54da7505a107ded317478fe https://github.com/symfony/symfony/commit/dc2dbd29211eb4ddc451373fa1374fb926e94604 https://github.com/symfony/symfony/releases/tag/v5.4.52 https://github.com/symfony/symfony/releases/tag/v6.4.40 https://github.com/symfony/symfony/releases/tag/v7.4.12 https://github.com/symfony/symfony/releases/tag/v8.0.12 https://github.com/symfony/symfony/security/advisories/GHSA-qpmx-3rfj-7rhv https://symfony.com/cve-2026-45067
symfony/mime	CVE-2026-45070	MEDIUM	v6.4.18	3.0.0, 5.1.0, 5.4.0, 6.2.0, 7.3.0, 7.4.0, 5.0.0, 6.1.0, 6.3.0, 5.2.0, 5.3.0, 6.4.0, 6.4.40, 8.0.12, 4.0.0, 5.4.52, 7.1.0, 7.2.0, 7.4.12	https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/mime/CVE-2026-45070.yaml https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2026-45070.yaml https://github.com/symfony/symfony https://github.com/symfony/symfony/commit/e62ea217f8b4ca8ae922ad0f949e0c4dc1f9b613 https://github.com/symfony/symfony/releases/tag/v5.4.52 https://github.com/symfony/symfony/releases/tag/v6.4.40 https://github.com/symfony/symfony/releases/tag/v7.4.12 https://github.com/symfony/symfony/releases/tag/v8.0.12 https://github.com/symfony/symfony/security/advisories/GHSA-vqc8-7275-q272 https://symfony.com/cve-2026-45070
symfony/polyfill-intl-idn	CVE-2026-46644	LOW	v1.31.0	1.38.1	https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/polyfill-intl-idn/CVE-2026-46644.yaml https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/polyfill/CVE-2026-46644.yaml https://github.com/symfony/polyfill https://github.com/symfony/polyfill/commit/1be936e2491ccebe152bd736dfc91eb1422c8bec https://github.com/symfony/polyfill/releases/tag/v1.38.1 https://github.com/symfony/polyfill/security/advisories/GHSA-2xf4-cg6j-vhgq https://symfony.com/cve-2026-46644
symfony/routing	CVE-2026-45065	MEDIUM	v6.4.18	5.3.0, 6.2.0, 7.3.0, 8.0.12, 5.1.0, 5.4.52, 6.1.0, 6.3.0, 6.4.40, 3.0.0, 4.0.0, 5.0.0, 5.2.0, 5.4.0, 7.2.0, 7.4.0, 6.4.0, 7.1.0, 7.4.12	https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/routing/CVE-2026-45065.yaml https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2026-45065.yaml https://github.com/symfony/symfony https://github.com/symfony/symfony/commit/bcf487c22f3240ba994124e0e0fe8616f3cfc47a https://github.com/symfony/symfony/releases/tag/v5.4.52 https://github.com/symfony/symfony/releases/tag/v6.4.40 https://github.com/symfony/symfony/releases/tag/v7.4.12 https://github.com/symfony/symfony/releases/tag/v8.0.12 https://github.com/symfony/symfony/security/advisories/GHSA-72xp-p242-47p9 https://symfony.com/cve-2026-45065
symfony/routing	CVE-2026-48784	MEDIUM	v6.4.18	5.3.0, 6.1.0, 6.2.0, 6.4.0, 3.0.0, 6.3.0, 7.3.0, 7.4.0, 5.1.0, 5.2.0, 6.4.41, 7.2.0, 8.0.13, 5.0.0, 5.4.0, 5.4.53, 7.1.0, 7.4.13, 4.0.0	https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/routing/CVE-2026-48784.yaml https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2026-48784.yaml https://github.com/symfony/symfony https://github.com/symfony/symfony/commit/4b63c3a3f7af04ecd79c89a594b0b02a01990b1d https://github.com/symfony/symfony/releases/tag/v5.4.53 https://github.com/symfony/symfony/releases/tag/v6.4.41 https://github.com/symfony/symfony/releases/tag/v7.4.13 https://github.com/symfony/symfony/security/advisories/GHSA-h5x3-xfc9-m39h https://symfony.com/cve-2026-48784
web-auth/webauthn-lib	GHSA-gq4g-fpc9-vjfq	LOW	4.9.1	5.3.5	https://github.com/web-auth/webauthn-framework https://github.com/web-auth/webauthn-framework/security/advisories/GHSA-gq4g-fpc9-vjfq
No Misconfigurations found
composer-vendor
No Vulnerabilities found
No Misconfigurations found
composer-vendor
No Vulnerabilities found
No Misconfigurations found
composer-vendor
No Vulnerabilities found
No Misconfigurations found
composer-vendor
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
league/flysystem	CVE-2026-102601	LOW	2.5.0	3.35.3	https://github.com/thephpleague/flysystem https://github.com/thephpleague/flysystem/commit/ef4a9a557d769b5d472c403125716706a0d9cc77 https://github.com/thephpleague/flysystem/releases/tag/3.35.3 https://github.com/thephpleague/flysystem/security/advisories/GHSA-cxf4-7mrp-vvpr https://nvd.nist.gov/vuln/detail/CVE-2026-102601
No Misconfigurations found
composer-vendor
No Vulnerabilities found
No Misconfigurations found
composer-vendor
No Vulnerabilities found
No Misconfigurations found