symfony dom-crawler

1 published vulnerability names this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-45071< 5.4.52 ; >= 6.0.0-BETA1, < 6.4.40 ; >= 7.0.0-BETA1, < 7.4.12 ; …Symfony: XXE (Local File Disclosure) in DomCrawler::addXmlContent() via validateOnParse = trueHIGH 8.70.6 %