symfony routing

1 published vulnerability names this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-48784< 5.4.53 ; >= 6.0.0-BETA1, < 6.4.41 ; >= 7.0.0-BETA1, < 7.4.13 ; …Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Nor…MEDIUM 5.10.3 %