symfony/http-kernel
Provides a structured process for converting a Request into a Response
View on Github
Activity
- Latest release
- 2w ago
- Total releases
- 856
- Cadence
- ~daily
- Last 12 months
- 82
Reach
- Stars
- 8.1k
Details
- License
- MIT
- First release
- Oct 04, 2011
| Version | Released | |
|---|---|---|
v8.1.6
patch
|
v8.1.6
patch
Dependencies (6)
Changelog
Compare changes
|
|
v7.4.18
patch
| ||
v6.4.45
patch
|
v6.4.45
patch
Dependencies (6)
Changelog
Compare changes
|
|
v8.1.5
patch
|
v8.1.5
patch
Dependencies (6)
Changelog
Compare changes
|
|
v7.4.17
patch
| ||
v6.4.44
patch
|
v6.4.44
patch
Dependencies (6)
Changelog
Compare changes
|
|
v8.1.4
patch
|
v8.1.4
patch
Dependencies (6)
Changelog
Compare changes
|
|
v7.4.16
patch
| ||
v8.1.2
patch
|
v8.1.2
patch
Dependencies (6)
Changelog
Compare changes
|
|
v8.0.15
patch
| ||
v7.4.15
patch
| ||
v6.4.43
patch
|
v6.4.43
patch
Dependencies (6)
Changelog
Compare changes
|
|
v8.1.1
patch
| ||
v8.0.14
patch
| ||
v7.4.14
patch
| ||
v6.4.42
patch
| ||
v8.1.0
minor
| ||
v8.1.0-RC1
pre
| ||
v8.0.13
patch
| ||
v7.4.13
patch
| ||
v6.4.41
patch
| ||
v5.4.53
patch
|
v5.4.53
patch
Dependencies (8)
Changelog
Compare changes
|
|
v8.1.0-BETA3
pre
| ||
v8.0.12
patch
| ||
v7.4.12
patch
| ||
v6.4.40
patch
| ||
v5.4.52
patch
| ||
v8.1.0-BETA2
pre
| ||
v8.0.11
patch
1 CVE
CVE-2026-45075
GHSA-6439-2f28-8p8q
May 27, 2026
Symfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]
High
Network
Low
Low
None
DescriptionSymfony's On the other hand, Symfony's router (and HTTP semantics generally) serves Even if the ResolutionWhen adding The patch for this issue is available here for branch 7.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and Alexandre Daubois for fixing it. Affected versions
v7.4.0
v7.4.1
v7.4.10
v7.4.11
v7.4.2
v7.4.3
v7.4.4
v7.4.5
v7.4.6
v7.4.7
v7.4.8
v8.0.0
+ 10 more Show less
v8.0.1
v8.0.10
v8.0.11
v8.0.2
v8.0.3
v8.0.4
v8.0.5
v8.0.6
v8.0.7
v8.0.8
Fixed in
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v7.4.11
patch
1 CVE
CVE-2026-45075
GHSA-6439-2f28-8p8q
May 27, 2026
Symfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]
High
Network
Low
Low
None
DescriptionSymfony's On the other hand, Symfony's router (and HTTP semantics generally) serves Even if the ResolutionWhen adding The patch for this issue is available here for branch 7.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and Alexandre Daubois for fixing it. Affected versions
v7.4.0
v7.4.1
v7.4.10
v7.4.11
v7.4.2
v7.4.3
v7.4.4
v7.4.5
v7.4.6
v7.4.7
v7.4.8
v8.0.0
+ 10 more Show less
v8.0.1
v8.0.10
v8.0.11
v8.0.2
v8.0.3
v8.0.4
v8.0.5
v8.0.6
v8.0.7
v8.0.8
Fixed in
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v6.4.39
patch
| ||
v8.1.0-BETA1
pre
| ||
v6.4.38
patch
| ||
v8.0.10
patch
1 CVE
CVE-2026-45075
GHSA-6439-2f28-8p8q
May 27, 2026
Symfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]
High
Network
Low
Low
None
DescriptionSymfony's On the other hand, Symfony's router (and HTTP semantics generally) serves Even if the ResolutionWhen adding The patch for this issue is available here for branch 7.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and Alexandre Daubois for fixing it. Affected versions
v7.4.0
v7.4.1
v7.4.10
v7.4.11
v7.4.2
v7.4.3
v7.4.4
v7.4.5
v7.4.6
v7.4.7
v7.4.8
v8.0.0
+ 10 more Show less
v8.0.1
v8.0.10
v8.0.11
v8.0.2
v8.0.3
v8.0.4
v8.0.5
v8.0.6
v8.0.7
v8.0.8
Fixed in
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v7.4.10
patch
1 CVE
CVE-2026-45075
GHSA-6439-2f28-8p8q
May 27, 2026
Symfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]
High
Network
Low
Low
None
DescriptionSymfony's On the other hand, Symfony's router (and HTTP semantics generally) serves Even if the ResolutionWhen adding The patch for this issue is available here for branch 7.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and Alexandre Daubois for fixing it. Affected versions
v7.4.0
v7.4.1
v7.4.10
v7.4.11
v7.4.2
v7.4.3
v7.4.4
v7.4.5
v7.4.6
v7.4.7
v7.4.8
v8.0.0
+ 10 more Show less
v8.0.1
v8.0.10
v8.0.11
v8.0.2
v8.0.3
v8.0.4
v8.0.5
v8.0.6
v8.0.7
v8.0.8
Fixed in
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v8.0.8
patch
1 CVE
CVE-2026-45075
GHSA-6439-2f28-8p8q
May 27, 2026
Symfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]
High
Network
Low
Low
None
DescriptionSymfony's On the other hand, Symfony's router (and HTTP semantics generally) serves Even if the ResolutionWhen adding The patch for this issue is available here for branch 7.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and Alexandre Daubois for fixing it. Affected versions
v7.4.0
v7.4.1
v7.4.10
v7.4.11
v7.4.2
v7.4.3
v7.4.4
v7.4.5
v7.4.6
v7.4.7
v7.4.8
v8.0.0
+ 10 more Show less
v8.0.1
v8.0.10
v8.0.11
v8.0.2
v8.0.3
v8.0.4
v8.0.5
v8.0.6
v8.0.7
v8.0.8
Fixed in
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v7.4.8
patch
1 CVE
CVE-2026-45075
GHSA-6439-2f28-8p8q
May 27, 2026
Symfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]
High
Network
Low
Low
None
DescriptionSymfony's On the other hand, Symfony's router (and HTTP semantics generally) serves Even if the ResolutionWhen adding The patch for this issue is available here for branch 7.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and Alexandre Daubois for fixing it. Affected versions
v7.4.0
v7.4.1
v7.4.10
v7.4.11
v7.4.2
v7.4.3
v7.4.4
v7.4.5
v7.4.6
v7.4.7
v7.4.8
v8.0.0
+ 10 more Show less
v8.0.1
v8.0.10
v8.0.11
v8.0.2
v8.0.3
v8.0.4
v8.0.5
v8.0.6
v8.0.7
v8.0.8
Fixed in
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v6.4.36
patch
| ||
v8.0.7
patch
1 CVE
CVE-2026-45075
GHSA-6439-2f28-8p8q
May 27, 2026
Symfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]
High
Network
Low
Low
None
DescriptionSymfony's On the other hand, Symfony's router (and HTTP semantics generally) serves Even if the ResolutionWhen adding The patch for this issue is available here for branch 7.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and Alexandre Daubois for fixing it. Affected versions
v7.4.0
v7.4.1
v7.4.10
v7.4.11
v7.4.2
v7.4.3
v7.4.4
v7.4.5
v7.4.6
v7.4.7
v7.4.8
v8.0.0
+ 10 more Show less
v8.0.1
v8.0.10
v8.0.11
v8.0.2
v8.0.3
v8.0.4
v8.0.5
v8.0.6
v8.0.7
v8.0.8
Fixed in
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v7.4.7
patch
1 CVE
CVE-2026-45075
GHSA-6439-2f28-8p8q
May 27, 2026
Symfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]
High
Network
Low
Low
None
DescriptionSymfony's On the other hand, Symfony's router (and HTTP semantics generally) serves Even if the ResolutionWhen adding The patch for this issue is available here for branch 7.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and Alexandre Daubois for fixing it. Affected versions
v7.4.0
v7.4.1
v7.4.10
v7.4.11
v7.4.2
v7.4.3
v7.4.4
v7.4.5
v7.4.6
v7.4.7
v7.4.8
v8.0.0
+ 10 more Show less
v8.0.1
v8.0.10
v8.0.11
v8.0.2
v8.0.3
v8.0.4
v8.0.5
v8.0.6
v8.0.7
v8.0.8
Fixed in
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v6.4.35
patch
| ||
v8.0.6
patch
1 CVE
CVE-2026-45075
GHSA-6439-2f28-8p8q
May 27, 2026
Symfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]
High
Network
Low
Low
None
DescriptionSymfony's On the other hand, Symfony's router (and HTTP semantics generally) serves Even if the ResolutionWhen adding The patch for this issue is available here for branch 7.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and Alexandre Daubois for fixing it. Affected versions
v7.4.0
v7.4.1
v7.4.10
v7.4.11
v7.4.2
v7.4.3
v7.4.4
v7.4.5
v7.4.6
v7.4.7
v7.4.8
v8.0.0
+ 10 more Show less
v8.0.1
v8.0.10
v8.0.11
v8.0.2
v8.0.3
v8.0.4
v8.0.5
v8.0.6
v8.0.7
v8.0.8
Fixed in
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v7.4.6
patch
1 CVE
CVE-2026-45075
GHSA-6439-2f28-8p8q
May 27, 2026
Symfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]
High
Network
Low
Low
None
DescriptionSymfony's On the other hand, Symfony's router (and HTTP semantics generally) serves Even if the ResolutionWhen adding The patch for this issue is available here for branch 7.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and Alexandre Daubois for fixing it. Affected versions
v7.4.0
v7.4.1
v7.4.10
v7.4.11
v7.4.2
v7.4.3
v7.4.4
v7.4.5
v7.4.6
v7.4.7
v7.4.8
v8.0.0
+ 10 more Show less
v8.0.1
v8.0.10
v8.0.11
v8.0.2
v8.0.3
v8.0.4
v8.0.5
v8.0.6
v8.0.7
v8.0.8
Fixed in
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v6.4.34
patch
| ||
v8.0.5
patch
1 CVE
CVE-2026-45075
GHSA-6439-2f28-8p8q
May 27, 2026
Symfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]
High
Network
Low
Low
None
DescriptionSymfony's On the other hand, Symfony's router (and HTTP semantics generally) serves Even if the ResolutionWhen adding The patch for this issue is available here for branch 7.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and Alexandre Daubois for fixing it. Affected versions
v7.4.0
v7.4.1
v7.4.10
v7.4.11
v7.4.2
v7.4.3
v7.4.4
v7.4.5
v7.4.6
v7.4.7
v7.4.8
v8.0.0
+ 10 more Show less
v8.0.1
v8.0.10
v8.0.11
v8.0.2
v8.0.3
v8.0.4
v8.0.5
v8.0.6
v8.0.7
v8.0.8
Fixed in
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v7.4.5
patch
1 CVE
CVE-2026-45075
GHSA-6439-2f28-8p8q
May 27, 2026
Symfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]
High
Network
Low
Low
None
DescriptionSymfony's On the other hand, Symfony's router (and HTTP semantics generally) serves Even if the ResolutionWhen adding The patch for this issue is available here for branch 7.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and Alexandre Daubois for fixing it. Affected versions
v7.4.0
v7.4.1
v7.4.10
v7.4.11
v7.4.2
v7.4.3
v7.4.4
v7.4.5
v7.4.6
v7.4.7
v7.4.8
v8.0.0
+ 10 more Show less
v8.0.1
v8.0.10
v8.0.11
v8.0.2
v8.0.3
v8.0.4
v8.0.5
v8.0.6
v8.0.7
v8.0.8
Fixed in
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v7.3.11
patch
| ||
v6.4.33
patch
| ||
v5.4.51
patch
| ||
v8.0.4
patch
1 CVE
CVE-2026-45075
GHSA-6439-2f28-8p8q
May 27, 2026
Symfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]
High
Network
Low
Low
None
DescriptionSymfony's On the other hand, Symfony's router (and HTTP semantics generally) serves Even if the ResolutionWhen adding The patch for this issue is available here for branch 7.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and Alexandre Daubois for fixing it. Affected versions
v7.4.0
v7.4.1
v7.4.10
v7.4.11
v7.4.2
v7.4.3
v7.4.4
v7.4.5
v7.4.6
v7.4.7
v7.4.8
v8.0.0
+ 10 more Show less
v8.0.1
v8.0.10
v8.0.11
v8.0.2
v8.0.3
v8.0.4
v8.0.5
v8.0.6
v8.0.7
v8.0.8
Fixed in
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev |