Skip to content

Symfony's JsonPath Evaluates Attacker-Controlled Regular Expressions in match()/search() Without Limits — ReDoS

Low severity GitHub Reviewed Published May 20, 2026 in symfony/symfony • Updated May 28, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts