Threats tagged 'ghsa-g3rh-rrhp-jhh9'

CVE-2024-50343 is a vulnerability in the Symfony Validator component where inputs ending with a newline character (\n) can bypass validation rules using regular expressions with the $ metacharacter. This occurs because the Validator did not properly anchor the regex to the end of the input. The issue is fixed by adding the 'D' regex modifier to ensure the entire input is matched. Fixed versions include 5.4.43, 6.4.11, and 7.1.4.