agentprime: sensiolabs-symfonyEvery new CVE for sensiolabs-symfony.https://agentprime.io/CVE-2026-121949: Symfony: HtmlSanitizer Does Not URL-Sanitize srcset and imagesrcset: Media Scheme and Host Allow-List Bypasshttps://agentprime.io/advisories/CVE-2026-121949/https://agentprime.io/advisories/CVE-2026-121949/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 17:46:04 GMTCVECVE-2026-123125: Symfony: Ip Constraint public/private Modes Accept IPv4-Mapped and IPv4-Compatible IPv6 Addresses allowing SSRF Filter Bypasshttps://agentprime.io/advisories/CVE-2026-123125/https://agentprime.io/advisories/CVE-2026-123125/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 15:55:11 GMTCVECVE-2026-123119: Symfony: NoPrivateNetworkHttpClient Does Not Pin the Checked IP of Cached Hosts, Letting DNS Rebinding Enumerate Internal Ports (Incomplete Fix for CVE-2024-50342)https://agentprime.io/advisories/CVE-2026-123119/https://agentprime.io/advisories/CVE-2026-123119/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 12:57:35 GMTCVECVE-2026-121971: Symfony: ScopingHttpClient Sends the Credentials of Its Default Scope to Other Origins Through Network-Path Referenceshttps://agentprime.io/advisories/CVE-2026-121971/https://agentprime.io/advisories/CVE-2026-121971/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 17:43:34 GMTCVECVE-2026-121373: Symfony: HtmlSanitizer MetaRefreshAttributeSanitizer Matches Only a Narrow Subset of the Browser Refresh Grammar (Incomplete Fix for CVE-2026-48761)https://agentprime.io/advisories/CVE-2026-121373/https://agentprime.io/advisories/CVE-2026-121373/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 12:59:22 GMTCVE