CLEANSTART-2026-YN27072: Symfony is a PHP framework for web and console applications and a set of reusable PHP components
Published Nov 14, 2026
·Updated
Security vulnerability affects the drupal package. Symfony is a PHP framework for web and console applications and a set of reusable PHP components.
Affected Software
3 affected componentsFixes available
cleanstart/drupal<11.4.11-r0
11.4.11-r0
cleanstart/drupal<11.1.10-r0
11.1.10-r0
cleanstart/drupal<11.2.14-r0
11.2.14-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/drupalto a version that resolves this vulnerability.Fixed in 11.4.11-r0 - Upgrade
Upgrade
cleanstart/drupalto a version that resolves this vulnerability.Fixed in 11.1.10-r0 - Upgrade
Upgrade
cleanstart/drupalto a version that resolves this vulnerability.Fixed in 11.2.14-r0
Frequently Asked Questions
1
Does exploitation require authentication or user interaction?
No. The provided vector indicates network-based exploitation with no privileges required and no user interaction required.
2
What is the expected security impact if exploitation succeeds?
The reported impact is low confidentiality impact and low integrity impact. No availability impact is indicated.