Skip to content

Symfony has XXE (Local File Disclosure) in DomCrawler::addXmlContent() via validateOnParse = true

Low severity GitHub Reviewed Published May 20, 2026 in symfony/symfony • Updated May 27, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts