Skip to content

SymfonyRuntime CVE-2024-50340 Patch Bypass: Web Requests Can Still Set APP_ENV/APP_DEBUG via parse_str/SAPI Argv Mismatch

Moderate severity GitHub Reviewed Published May 20, 2026 in symfony/symfony • Updated Jun 9, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts