CVE WATCH / VULNERABILITY DETAIL

CVE-2026-108082

UNKNOWNCVSS 0NVD feed

Published 15 October 2026 · tracked since 16 October 2026

Description

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.54, 6.4.46, 7.4.19, and 8.1.7, HeaderUtils::split() parsed header values with a pattern whose token alternative also matched whitespace, followed by a (?<!\s) lookbehind. A run of

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools