symfony/mailer
Helps sending emails
Activity
- Latest release
- 8h ago
- Total releases
- 248
- Cadence
- ~3 days
- Last 12 months
- 38
Reach
- Stars
- 1.6k
Details
- License
- MIT
- First release
- Apr 26, 2019
| Version | Released | |
|---|---|---|
v8.1.7
patch
|
v8.1.7
patch
Dependencies (6)
Changelog
Compare changes
|
|
v7.4.19
patch
| ||
v6.4.46
patch
|
v6.4.46
patch
Dependencies (6)
Changelog
Compare changes
|
|
v8.1.5
patch
|
v8.1.5
patch
Dependencies (6)
Changelog
Compare changes
|
|
v7.4.17
patch
| ||
v6.4.44
patch
|
v6.4.44
patch
Dependencies (6)
Changelog
Compare changes
|
|
v8.1.2
patch
|
v8.1.2
patch
Dependencies (6)
Changelog
Compare changes
|
|
v8.0.15
patch
| ||
v7.4.15
patch
| ||
v6.4.43
patch
|
v6.4.43
patch
Dependencies (6)
Changelog
Compare changes
|
|
v8.1.1
patch
| ||
v8.0.14
patch
| ||
v7.4.14
patch
| ||
v8.1.0
minor
| ||
v8.1.0-BETA3
pre
| ||
v8.0.12
patch
| ||
v7.4.12
patch
| ||
v6.4.40
patch
| ||
v5.4.52
patch
|
v5.4.52
patch
Dependencies (8)
Changelog
Compare changes
|
|
v8.1.0-BETA1
pre
| ||
v8.0.8
patch
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v7.4.8
patch
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v8.0.6
patch
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v7.4.6
patch
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v6.4.34
patch
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v8.0.4
patch
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v7.4.4
patch
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v7.3.10
patch
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v8.0.3
patch
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v7.4.3
patch
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v7.3.9
patch
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v6.4.31
patch
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v8.0.0
major
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v7.4.0
minor
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v8.0.0-RC1
pre
| ||
v7.4.0-RC1
pre
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v7.3.5
patch
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v6.4.27
patch
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v7.3.4
patch
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v6.4.26
patch
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v7.3.3
patch
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v6.4.25
patch
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v6.4.24
patch
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v7.3.2
patch
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v7.2.9
patch
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev |
v7.2.9
patch
Changelog
Compare changes
|
|
v7.3.1
patch
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev |
v7.3.1
patch
Changelog
Compare changes
|
|
v7.2.8
patch
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev |
v7.2.8
patch
Changelog
Compare changes
|
|
v6.4.23
patch
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev |
v6.4.23
patch
Changelog
Compare changes
|
|
v6.4.21
patch
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
v7.3.0
minor
1 CVE
CVE-2026-45068
GHSA-xx3c-qf5g-hc39
May 27, 2026
Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address
Medium
Network
Low
Low
None
DescriptionSymfony Mailer selects a transport via the In ResolutionThe The patch for this issue is available here for branch 5.4. CreditsSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix. Affected versions
v4.3.0
v4.3.0-BETA1
v4.3.0-BETA2
v4.3.0-RC1
v4.3.1
v4.3.10
v4.3.11
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
+ 240 more Show less
v4.3.7
v4.3.8
v4.3.9
v4.4.0
v4.4.0-BETA1
v4.4.0-BETA2
v4.4.0-RC1
v4.4.1
v4.4.10
v4.4.11
v4.4.12
v4.4.13
v4.4.14
v4.4.15
v4.4.16
v4.4.17
v4.4.18
v4.4.19
v4.4.2
v4.4.20
v4.4.21
v4.4.22
v4.4.25
v4.4.26
v4.4.27
v4.4.3
v4.4.36
v4.4.37
v4.4.38
v4.4.4
v4.4.40
v4.4.41
v4.4.43
v4.4.44
v4.4.45
v4.4.46
v4.4.48
v4.4.49
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v5.0.0
v5.0.0-BETA1
v5.0.0-BETA2
v5.0.0-RC1
v5.0.1
v5.0.10
v5.0.11
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1.0
v5.1.0-BETA1
v5.1.0-RC1
v5.1.0-RC2
v5.1.1
v5.1.10
v5.1.11
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.1.6
v5.1.7
v5.1.8
v5.1.9
v5.2.0
v5.2.0-BETA1
v5.2.0-BETA2
v5.2.0-BETA3
v5.2.0-RC1
v5.2.0-RC2
v5.2.1
v5.2.10
v5.2.11
v5.2.12
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.3.0
v5.3.0-BETA1
v5.3.0-BETA2
v5.3.0-BETA4
v5.3.0-RC1
v5.3.13
v5.3.14
v5.3.3
v5.3.4
v5.3.9
v5.4.0
v5.4.0-BETA1
v5.4.0-RC1
v5.4.10
v5.4.11
v5.4.12
v5.4.13
v5.4.15
v5.4.16
v5.4.17
v5.4.19
v5.4.2
v5.4.21
v5.4.22
v5.4.3
v5.4.31
v5.4.34
v5.4.35
v5.4.36
v5.4.38
v5.4.39
v5.4.40
v5.4.41
v5.4.44
v5.4.45
v5.4.5
v5.4.7
v5.4.8
v6.0.0
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.15
v6.0.16
v6.0.17
v6.0.19
v6.0.2
v6.0.3
v6.0.5
v6.0.7
v6.0.8
v6.1.0
v6.1.0-BETA1
v6.1.0-BETA2
v6.1.0-RC1
v6.1.1
v6.1.11
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.7
v6.1.8
v6.1.9
v6.2.0
v6.2.0-BETA1
v6.2.0-BETA2
v6.2.0-BETA3
v6.2.0-RC1
v6.2.0-RC2
v6.2.1
v6.2.12
v6.2.2
v6.2.5
v6.2.7
v6.2.8
v6.3.0
v6.3.0-BETA1
v6.3.0-RC1
v6.3.11
v6.3.12
v6.3.5
v6.4.0
v6.4.0-BETA1
v6.4.0-BETA3
v6.4.0-RC1
v6.4.12
v6.4.13
v6.4.18
v6.4.2
v6.4.21
v6.4.23
v6.4.24
v6.4.25
v6.4.26
v6.4.27
v6.4.3
v6.4.31
v6.4.34
v6.4.4
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v7.0.0
v7.0.2
v7.0.3
v7.0.4
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.0-BETA1
v7.1.0-RC1
v7.1.1
v7.1.11
v7.1.2
v7.1.5
v7.1.6
v7.2.0
v7.2.0-BETA1
v7.2.0-RC1
v7.2.3
v7.2.6
v7.2.8
v7.2.9
v7.3.0
v7.3.0-BETA1
v7.3.0-RC1
v7.3.1
v7.3.10
v7.3.2
v7.3.3
v7.3.4
v7.3.5
v7.3.9
v7.4.0
v7.4.0-BETA1
v7.4.0-RC1
v7.4.3
v7.4.4
v7.4.6
v7.4.8
v8.0.0
v8.0.3
v8.0.4
v8.0.6
v8.0.8
Fixed in
5.4.52
6.4.40
7.4.12
8.0.12
References
Updated Sep 10, 2026 · Source: OSV.dev |