VulertSecurity VulertSecurity

Vulnerability Database · Packagist · symfony/symfony · Version

symfony/symfony 2.0.6

2.0.6 is affected by 10 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 1 High 3 Medium 5 Low 1 Unrated 0

All symfony/symfony versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

symfony/symfony 2.0.6 vulnerabilities

10 vulnerabilities cover symfony/symfony 2.0.6. Open the full list in the database.

Vulnerability Severity Fixed version Disclosed
Symfony XML decoding attack vector through external entities in symfony/symfony 9.8 critical 2.0.11 30 May 2024
CVE-2014-6072: Symfony Web Profiler Cross-Site Request Forgery Vulnerability 8.1 high 2.3.19 30 May 2024
Symfony XML Entity Expansion security vulnerability in symfony/symfony 7.5 high 2.0.17 30 May 2024
CVE-2013-4752: Symfony Host Header Injection vulnerability in the HttpFoundation component 6.1 medium 2.0.24 05 May 2022
Symfony2 Improper IP Based Access Control 5.9 medium 2.0.19 30 May 2024
CVE-2024-50343: Symfony Validator Regex Vulnerability Leading to Incorrect Input Handling 3.1 low 5.4.43 06 Nov 2024
CVE-2012-6432: Symfony Access Control Vulnerability in symfony/symfony N/A medium No fix published 17 May 2022
CVE-2013-5958: Symfony Denial of Service Via Long Password Hashing N/A medium 2.0.25 17 May 2022
CVE-2015-2308: Symfony Vulnerable to PHP Eval Injection N/A medium 2.3.27 17 May 2022
CVE-2013-1348: Symphony Vulnerable to PHP Code Injection via YAML Parsing N/A high 2.0.22 17 May 2022

Looking for another version, or everything Vulert holds for symfony/symfony?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About symfony/symfony 2.0.6

Is symfony/symfony 2.0.6 vulnerable?

Yes. 10 vulnerabilities in the Vulert database cover symfony/symfony 2.0.6: 1 critical, 3 high, 5 medium and 1 low. Each entry above names the fixed version to move to.

How do I monitor symfony/symfony for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the symfony/symfony version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.