Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

sensiolabs Vulnerabilities & CVE List (Oct 2026) | CyStack

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-109449`Symfony: Unbounded Nesting in the Expression Parser Lets Untrusted Expressions Crash the Process	Exploitation statusNot exploited	FixYes	Affected productsymfony	Published10/15/2026	SeverityHigh
`CVE-2026-109413`Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process	Exploitation statusNot exploited	FixYes	Affected productsymfony	Published
`CVE-2026-108082`Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header	Exploitation statusNot exploited	FixYes	Affected productsymfony	Published
`CVE-2026-48761`Symfony: HtmlSanitizer UrlAttributeSanitizer Misses URL Attributes on <object>, <applet>, <iframe>, <img> and the URL Inside <meta http-equiv="refresh"> content	Exploitation statusNot exploited	FixYes	Affected productsymfony
`CVE-2026-48747`Symfony: Mailomat Mailer Webhook Parser Reads the HMAC Algorithm from the Request: Signature Algorithm Downgrade	Exploitation statusNot exploited	FixYes	Affected productsymfony	Published
`CVE-2026-48489`Symfony: Security Firewall Bypass via failure_forward Subrequest: Unauthenticated Access to access_control-Protected GET Routes	Exploitation statusNot exploited	FixYes	Affected productsymfony
`CVE-2026-48760`Symfony: HtmlSanitizer URL Parser Deny Gates Underinclusive: Percent-Encoded BiDi Marks and Unicode Whitespace Bypass Visual-Spoofing Defense	Exploitation statusNot exploited	FixYes	Affected productsymfony
`CVE-2026-48736`Symfony: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms (6to4, NAT64, Teredo, IPv4-compatible): SSRF Bypass in NoPrivateNetworkHttpClient	Exploitation statusNot exploited	FixYes	Affected productsymfony
`CVE-2026-48784`Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization	Exploitation statusNot exploited	FixYes	Affected productsymfony
`CVE-2026-45068`Symfony: Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address	Exploitation statusNot exploited	FixYes	Affected productsymfony	Published

94 Results | Page 1 of 10

Security vulnerabilities from sensiolabs

sensiolabs

How many security vulnerabilities does sensiolabs have?

Which sensiolabs product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular sensiolabs products