Packages / Debian 13 (Trixie) / php / php-symfony

Package: php-symfony (6.4.41+dfsg-0+deb13u1)

set of reusable components and framework for web projects

Other Packages Related to php-symfony:

dep: [php-symfony-asset] (= 6.4.41+dfsg-0+deb13u1)
manage asset URLs
dep: [php-symfony-asset-mapper] (= 6.4.41+dfsg-0+deb13u1)
maps directories of asset and makes them available in a public directory
dep: [php-symfony-browser-kit] (= 6.4.41+dfsg-0+deb13u1)
simulate the behavior of a web browser
dep: [php-symfony-cache] (= 6.4.41+dfsg-0+deb13u1)
provides extended PSR-6, PSR-16 (and tags) implementations
dep: [php-symfony-clock] (= 6.4.41+dfsg-0+deb13u1)
Decouples applications from the system clock
dep: [php-symfony-config] (= 6.4.41+dfsg-0+deb13u1)
load configurations from different data sources
dep: [php-symfony-console] (= 6.4.41+dfsg-0+deb13u1)
run tasks from the command line
dep: [php-symfony-css-selector] (= 6.4.41+dfsg-0+deb13u1)
convert CSS selectors to XPath expressions
dep: [php-symfony-dependency-injection] (= 6.4.41+dfsg-0+deb13u1)
standardize and centralize construction of objects
dep: [php-symfony-debug-bundle] (= 6.4.41+dfsg-0+deb13u1)
debugging tools for the Symfony framework
dep: [php-symfony-doctrine-bridge] (= 6.4.41+dfsg-0+deb13u1)
integration for Doctrine with Symfony Components
dep: [php-symfony-dom-crawler] (= 6.4.41+dfsg-0+deb13u1)
ease DOM navigation for HTML and XML documents
dep: [php-symfony-dotenv] (= 6.4.41+dfsg-0+deb13u1)
.env files parser to make environment variables accessible
dep: [php-symfony-error-handler] (= 6.4.41+dfsg-0+deb13u1)
manage errors and ease debugging
dep: [php-symfony-event-dispatcher] (= 6.4.41+dfsg-0+deb13u1)
dispatch events and listen to them
dep: [php-symfony-expression-language] (= 6.4.41+dfsg-0+deb13u1)
compile and evaluate expressions
dep: [php-symfony-filesystem] (= 6.4.41+dfsg-0+deb13u1)
basic filesystem utilities
dep: [php-symfony-finder] (= 6.4.41+dfsg-0+deb13u1)
find files and directories
dep: [php-symfony-form] (= 6.4.41+dfsg-0+deb13u1)
create HTML forms and process request data
dep: [php-symfony-framework-bundle] (= 6.4.41+dfsg-0+deb13u1)
basic, robust and flexible MVC framework
dep: [php-symfony-http-client] (= 6.4.41+dfsg-0+deb13u1)
methods to fetch HTTP resources synchronously or asynchronously
dep: [php-symfony-http-foundation] (= 6.4.41+dfsg-0+deb13u1)
object-oriented layer for the HTTP specification
dep: [php-symfony-http-kernel] (= 6.4.41+dfsg-0+deb13u1)
building blocks for flexible and fast HTTP-based frameworks
dep: [php-symfony-intl] (= 6.4.41+dfsg-0+deb13u1)
limited replacement layer for the PHP extension intl
dep: [php-symfony-ldap] (= 6.4.41+dfsg-0+deb13u1)
abstraction layer for the PHP LDAP module
dep: [php-symfony-lock] (= 6.4.41+dfsg-0+deb13u1)
create and manage locks
dep: [php-symfony-mailer] (= 6.4.41+dfsg-0+deb13u1)
help sending emails
dep: [php-symfony-messenger] (= 6.4.41+dfsg-0+deb13u1)
send and receive messages
dep: [php-symfony-mime] (= 6.4.41+dfsg-0+deb13u1)
library to manipulate MIME messages
dep: [php-symfony-monolog-bridge] (= 6.4.41+dfsg-0+deb13u1)
integration for Monolog with Symfony Components
dep: [php-symfony-notifier] (= 6.4.41+dfsg-0+deb13u1)
Sends notifications via one or more channels (email, SMS, ...)
dep: [php-symfony-options-resolver] (= 6.4.41+dfsg-0+deb13u1)
configure objects with option arrays
dep: [php-symfony-password-hasher] (= 6.4.41+dfsg-0+deb13u1)
password hashing utilities - Symfony Component
dep: [php-symfony-process] (= 6.4.41+dfsg-0+deb13u1)
execute commands in sub-processes
dep: [php-symfony-property-access] (= 6.4.41+dfsg-0+deb13u1)
read from and write to an object or array
dep: [php-symfony-property-info] (= 6.4.41+dfsg-0+deb13u1)
extract information about properties of PHP classes
dep: [php-symfony-proxy-manager-bridge] (= 6.4.41+dfsg-0+deb13u1)
integration for ProxyManager with Symfony Components
dep: [php-symfony-rate-limiter] (= 6.4.41+dfsg-0+deb13u1)
rate limit input and output in applications
dep: [php-symfony-remote-event] (= 6.4.41+dfsg-0+deb13u1)
Eases handling remote events
dep: [php-symfony-routing] (= 6.4.41+dfsg-0+deb13u1)
associate a request with code that generates a response
dep: [php-symfony-scheduler] (= 6.4.41+dfsg-0+deb13u1)
Provides scheduling through Symfony Messenger
dep: [php-symfony-security-bundle] (= 6.4.41+dfsg-0+deb13u1)
configurable security system for the Symfony framework
dep: [php-symfony-security-core] (= 6.4.41+dfsg-0+deb13u1)
infrastructure for authorization systems - common features
dep: [php-symfony-security-csrf] (= 6.4.41+dfsg-0+deb13u1)
infrastructure for authorization systems - CSRF protection
dep: [php-symfony-security-http] (= 6.4.41+dfsg-0+deb13u1)
infrastructure for authorization systems - HTTP integration
dep: [php-symfony-semaphore] (= 6.4.41+dfsg-0+deb13u1)
provide exclusive access to a shared resource
dep: [php-symfony-serializer] (= 6.4.41+dfsg-0+deb13u1)
convert PHP objects into specific formats and vice versa
dep: [php-symfony-stopwatch] (= 6.4.41+dfsg-0+deb13u1)
profile PHP code
dep: [php-symfony-string] (= 6.4.41+dfsg-0+deb13u1)
object-oriented API to work with strings
dep: [php-symfony-templating] (= 6.4.41+dfsg-0+deb13u1)
tools needed to build a template system
dep: [php-symfony-translation] (= 6.4.41+dfsg-0+deb13u1)
tools to internationalize an application
dep: [php-symfony-twig-bridge] (= 6.4.41+dfsg-0+deb13u1)
integration for Twig with Symfony Components
dep: [php-symfony-twig-bundle] (= 6.4.41+dfsg-0+deb13u1)
configurable integration of Twig with the Symfony framework
dep: [php-symfony-uid] (= 6.4.41+dfsg-0+deb13u1)
object-oriented API to generate and represent UIDs
dep: [php-symfony-validator] (= 6.4.41+dfsg-0+deb13u1)
tools to validate values
dep: [php-symfony-var-dumper] (= 6.4.41+dfsg-0+deb13u1)
mechanisms for walking through any arbitrary PHP variable
dep: [php-symfony-var-exporter] (= 6.4.41+dfsg-0+deb13u1)
export serializable PHP data structure to plain PHP code
dep: [php-symfony-web-link] (= 6.4.41+dfsg-0+deb13u1)
manage links between resources
dep: [php-symfony-web-profiler-bundle] (= 6.4.41+dfsg-0+deb13u1)
collect requests information for analysis and debugging
dep: [php-symfony-webhook] (= 6.4.41+dfsg-0+deb13u1)
Eases sending and consuming webhooks
dep: [php-symfony-workflow] (= 6.4.41+dfsg-0+deb13u1)
manage a workflow or finite state machine
dep: [php-symfony-yaml] (= 6.4.41+dfsg-0+deb13u1)
convert YAML to PHP arrays and the other way around
dep: [php-common]
Common files for PHP packages
dep: [php-composer-semver] (>= 3.0)
utilities, version constraint parsing and validation
dep: [php-composer-semver] (<< 4~~)
utilities, version constraint parsing and validation
dep: [php-xml]
DOM, SimpleXML, WDDX, XML, and XSL module for PHP [default]
dep: php-friendsofphp-proxy-manager-lts (>= 1.0.2)
Package not available
dep: php-friendsofphp-proxy-manager-lts (<< 2~~)
Package not available
dep: [php-doctrine-event-manager]
Doctrine Event Manager component
dep: [php-doctrine-persistence]
Doctrine Persistence abstractions
dep: [php-twig]
Flexible, fast, and secure template engine for PHP
dep: [php-psr-cache] (>> 2.0)
Common interface for caching libraries
dep: [php-psr-clock] (>= 1.0)
Common interface for reading the clock
dep: [php-psr-clock] (<< 2~~)
Common interface for reading the clock
dep: [php-psr-container]
Common Container Interface (PHP FIG PSR-11)
dep: [php-psr-event-dispatcher] (>= 1.0)
Standard interfaces for event handling
dep: [php-psr-event-dispatcher] (<< 2~~)
Standard interfaces for event handling
dep: [php-psr-http-message]
Common interface for HTTP messages
dep: [php-psr-link]
Common interfaces for HTTP links
dep: [php-psr-log]
common interface for logging libraries
dep: [php-symfony-contracts]
A set of abstractions extracted out of the Symfony components
dep: [php-intl]
Internationalisation module for PHP [default]
dep: [php-mbstring]
MBSTRING module for PHP [default]
dep: [php-uuid]
PHP UUID extension

Download php-symfony

Architecture	Package size	Installed size	Files	Package
all	148 KiB	186 KiB	list of files	Download

Package file paths (0)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

No package-associated file paths were observed for the displayed build metadata.

Field source: Debian 13 (Trixie) main amd64

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Debian 13 (Trixie) in the browser Build an image that includes php-symfony

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
6.4.41+dfsg-0+deb13u1	trixie / main	all	Debian 13 · main · amd64	148 KiB	186 KiB	pool/main/s/symfony/php-symfony_6.4.41+dfsg-0+deb13u1_all.deb
6.4.41+dfsg-0+deb13u1	trixie / main	all	Debian 13 · main · arm64	148 KiB	186 KiB	pool/main/s/symfony/php-symfony_6.4.41+dfsg-0+deb13u1_all.deb
6.4.41+dfsg-0+deb13u1	trixie-security / main	all	Debian 13 security · main · arm64	148 KiB	186 KiB	pool/updates/main/s/symfony/php-symfony_6.4.41+dfsg-0+deb13u1_all.deb
6.4.41+dfsg-0+deb13u1	trixie-security / main	all	Debian 13 security · main · amd64	148 KiB	186 KiB	pool/updates/main/s/symfony/php-symfony_6.4.41+dfsg-0+deb13u1_all.deb

Field source: Debian 13 (Trixie) main amd64

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVE	Severity	Version impact
[CVE-2026-109449] In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth. An expression made of	High(8.7)	Affected Details (4) `6.4.41+dfsg-0+deb13u1` · all · trixie Affected nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie Affected nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Affected nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Affected nvd · symfony · debian · 13
[CVE-2026-109413] In Symfony YAML prior to versions 5.4.54, 6.4.45, 7.4.18, and 8.1.6, Yaml\Parser::lexInlineStructure() recursed through lexInlineMapping() and lexInlineSequence() for every { and [ of an inline collec	High(8.7)	Affected Details (4) `6.4.41+dfsg-0+deb13u1` · all · trixie Affected nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie Affected nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Affected nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Affected nvd · symfony · debian · 13
[CVE-2026-108082] Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.54, 6.4.46, 7.4.19, and 8.1.7, HeaderUtils::split() parsed header values with a	High(8.7)	Affected Details (4) `6.4.41+dfsg-0+deb13u1` · all · trixie Affected nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie Affected nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Affected nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Affected nvd · symfony · debian · 13
[CVE-2026-48784] Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.53, 6.4.41, 7.4.13, and 8.0.13, UrlGenerator::doGenerate() used strtr() dot-segment encod	Medium(5.1)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 9:44:17 PM UTC Details (4) `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13
[CVE-2026-48761] Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0 until 6.4.41, 7.4.13, and 8.0.13, UrlAttributeSanitizer::getSupportedAttributes() omitted U	Medium(5.3)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 9:44:17 PM UTC Details (4) `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13
[CVE-2026-48760] Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0 until 6.4.41, 7.4.13, and 8.0.13, UrlSanitizer::parse() rejected raw BiDi formatting charac	Medium(5.3)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 9:44:17 PM UTC Details (4) `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13
[CVE-2026-48736] Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 5.4.0 to 5.4.53, 6.4.41, 7.4.13, and 8.0.13, NoPrivateNetworkHttpClient and IpUtils::PRIVATE_SUBN	Medium(6.9)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 9:44:18 PM UTC Details (4) `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13
[CVE-2026-48489] Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.53, 6.4.41, 7.4.13, and 8.0.13, DefaultAuthenticationFailureHandler honored the request-s	High(8.7)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 9:44:18 PM UTC Details (4) `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13
[CVE-2026-47212] Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.12, and 8.0.12, TwilioRequestParser::doParse() received the configured webhook se	Medium(6.9)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 9:44:18 PM UTC Details (4) `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13
[CVE-2026-45071] Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, Crawler::addXmlContent() set DOMDocument::$validateOnPars	High(8.7)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 9:44:18 PM UTC Details (4) `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13
[CVE-2026-45068] Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, SendmailTransport in -t mode appended recipient addresses	High(8.7)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 9:44:18 PM UTC Details (4) `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13
[CVE-2026-47767] Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 5.4.46 until 5.4.52, 6.4.40, 7.4.12, and 8.0.12, the CVE-2024-50340 fix gated runtime argv parsin	High(8.3)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 9:44:19 PM UTC Details (4) `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13
[CVE-2026-45754] Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.12, and 8.0.12, the Mailjet mailer bridge and LOX24 notifier bridge webhook parse	Medium(6.9)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 9:44:19 PM UTC Details (4) `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13
[CVE-2026-45753] Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0-BETA1 until 6.4.40, 7.4.12, and 8.0.12, UrlAttributeSanitizer::getSupportedAttributes() omi	Low(2.1)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 9:44:19 PM UTC Details (4) `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13
[CVE-2026-45073] Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, PdoAdapter::doClear() builds a DELETE statement using a n	Medium(6.3)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 9:44:20 PM UTC Details (4) `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13
[CVE-2026-45072] Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.4.24 until 6.4.40, 7.4.12, and 8.0.12, the development profiler file_excerpt Twig filter escape	Low(2)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 9:44:19 PM UTC Details (4) `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13
[CVE-2026-45070] Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, Symfony\Component\Mime\Header\ParameterizedHeader validat	Medium(6.3)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 9:44:19 PM UTC Details (4) `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13
[CVE-2026-45069] Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.12, and 8.0.12, OidcTokenHandler::verifyClaims() registered audience (aud), issue	High(8.8)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 9:44:20 PM UTC Details (4) `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13
[CVE-2026-45064] Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0-BETA1 until 6.4.40, 7.4.12, and 8.0.12, UrlSanitizer::parse() passes Unicode explicit-direc	Low(2.3)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 9:44:20 PM UTC Details (4) `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13
[CVE-2026-45063] Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, X509Authenticator extracts the user identifier from $_SER	Critical(9.1)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 9:44:20 PM UTC Details (4) `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13 `6.4.41+dfsg-0+deb13u1` · all · trixie-security Fixed · Fixed: `6.4.41+dfsg-0+deb13u1` nvd · symfony · debian · 13

[Next results]

Last synced: Oct 24, 2026, 3:28:18 AM UTC

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

6.4.41+dfsg-0+deb13u1 / allObserved Sep 1, 2026sha256 0c6db39110a4…5f05db68Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 0c6db39110a441cb70d0a5852395f05420635f07308ed46a026eca7a5f05db68

Verify download

printf '%s  %s\n' '0c6db39110a441cb70d0a5852395f05420635f07308ed46a026eca7a5f05db68' 'php-symfony_6.4.41+dfsg-0+deb13u1_all.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main amd64

6.4.41+dfsg-0+deb13u1 / allObserved Sep 1, 2026sha256 0c6db39110a4…5f05db68Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 0c6db39110a441cb70d0a5852395f05420635f07308ed46a026eca7a5f05db68

Verify download

printf '%s  %s\n' '0c6db39110a441cb70d0a5852395f05420635f07308ed46a026eca7a5f05db68' 'php-symfony_6.4.41+dfsg-0+deb13u1_all.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main arm64

6.4.41+dfsg-0+deb13u1 / allObserved Sep 1, 2026sha256 0c6db39110a4…5f05db68Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 0c6db39110a441cb70d0a5852395f05420635f07308ed46a026eca7a5f05db68

Verify download

printf '%s  %s\n' '0c6db39110a441cb70d0a5852395f05420635f07308ed46a026eca7a5f05db68' 'php-symfony_6.4.41+dfsg-0+deb13u1_all.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) security main arm64

6.4.41+dfsg-0+deb13u1 / allObserved Aug 10, 2026 – Oct 24, 2026sha256 0c6db39110a4…5f05db68Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 0c6db39110a441cb70d0a5852395f05420635f07308ed46a026eca7a5f05db68

Verify download

printf '%s  %s\n' '0c6db39110a441cb70d0a5852395f05420635f07308ed46a026eca7a5f05db68' 'php-symfony_6.4.41+dfsg-0+deb13u1_all.deb' | sha256sum --check --strict -

Field source: Debian Security

Sources

Debian 13 (Trixie) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/trixie/InRelease
Signed-object SHA-256
98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Observed SHA-256
3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Result
match verified
Debian 13 (Trixie) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/trixie/InRelease
Signed-object SHA-256
98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Observed SHA-256
753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Result
match verified
Debian 13 (Trixie) security main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
trixie-security-main-arm64:a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
Repository-signature verification record
Signed object
https://security.debian.org/debian-security/dists/trixie-security/InRelease
Signed-object SHA-256
fb4f5284b755510aafc1d8a39ef966c7ef714aaab3ecc24baae0a67c38518ab5
Signer fingerprint
B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
Observed SHA-256
a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
Result
match verified
Debian SecurityOct 24, 2026
Authoritative source; repository metadata signature verified
Signature evidence
trixie-security-main-amd64:80abc7ace801ccb58732fe448148850e3078f925942b034fe532c371f804c2a0
Repository-signature verification record
Signed object
https://security.debian.org/debian-security/dists/trixie-security/InRelease
Signed-object SHA-256
2dc86861c04386d3c511340d4f011a37acfd1cccdf3dbd3e054d6fe8e4118ebc
Signer fingerprint
B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Oct 24, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
80abc7ace801ccb58732fe448148850e3078f925942b034fe532c371f804c2a0
Observed SHA-256
80abc7ace801ccb58732fe448148850e3078f925942b034fe532c371f804c2a0
Result
match verified