LiveComponentHydrator HMAC checksum lacks component and slot binding
May 29, 2026
#Security Advisories
#Symfony UX
👍 1
Information exposure via unescaped LIKE wildcards in EntitySearchUtil
May 29, 2026
#Security Advisories
#Symfony UX
👍 1
CVE-2026-49215 CSRF Protection Bypass in symfony/ux-live-component: Accept Header is CORS-Safelisted
CSRF Protection Bypass in symfony/ux-live-component: Accept Header is CORS-Safelisted
May 29, 2026
#Security Advisories
#Symfony UX
Format-less date LiveProps parsed with the permissive DateTime constructor
May 29, 2026
#Security Advisories
#Symfony UX
Denial of service in symfony/ux-live-component via unbounded batch action requests
May 29, 2026
#Security Advisories
#Symfony UX
XSS in symfony/ux-live-component via attacker-controlled child component tag
May 29, 2026
#Security Advisories
#Symfony UX
XSS in symfony/ux-autocomplete via unescaped AJAX response data
May 29, 2026
#Security Advisories
#Symfony UX