CVE-2026-45077

Summary

Symfony has Unauthenticated PHP Object Deserialization in MonologBridge server:log Listener

Severity

high

Also known as

GHSA-m7v2-7gxm-vc2v#symfony/monolog-bridge, GHSA-m7v2-7gxm-vc2v#symfony/symfony

Published

2026-05-27

References

• https://github.com/symfony/symfony/security/advisories/GHSA-m7v2-7gxm-vc2v
• https://github.com/symfony/symfony/commit/0891b2f293896c488e26943dc034334364b77fc4
• https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/monolog-bridge/CVE-2026-45077.yaml

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Summarize with AI

ChatGPTClaudePerplexity