Flux
CVE-2026-55877: XSS in symfony/ux-icons via unsanitized SVG content in local files and Iconify on-demand responses
Programmation Web

CVE-2026-55877: XSS in symfony/ux-icons via unsanitized SVG content in local files and Iconify on-demand responses

Symfony Blog ·

Affected versions Symfony UX Icons versions >=2.17.0=3.0.0<3.2.0 are affected by this security issue. The issue has been fixed in Symfony UX Icons 2.36.1, 3.2.0. Description The ux_icon() Twig function is marked is_safe=['html'],…

Soutenez Symfony Blog en consultant la ressource originale

Lire l'article original

Vous aimez découvrir ces sources ?

Soutenez-moi sur Patreon

Articles similaires