All vulnerabilities

Servers and applications

GHSA-xg2q-4rrq-657q

The "private_ranges" Trusted Proxies Shortcut Trusts Clients Presenting an IPv4-Mapped, 6to4, Teredo or NAT64 Address as Reverse Proxies

Severity
Medium
Published
4 Nov 2026
Last changed
4 Nov 2026
Added to UpHeron
4 Nov 2026
Fixed in
7.4.23, 8.1.11
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
SymfonyServers and applications · github:symfony/symfony
  • From 7.1 before 7.4.23
  • From 8 before 8.1.11

References