CVE-2024-50343

symfony/validator is a module for the Symphony PHP framework which provides tools to validate values. It is possible to trick a `Validator` configured with a regular expression using the `$` metacharacters, with an input ending with `\n`. Symfony as of versions 5.4.43, 6.4.11, and 7.1.4 now uses the `D` regex modifier to match the entire input. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-20

• https://github.com/symfony/symfony/commit/7d1032bbead9a4229b32fa6ebca32681c80cb76f
• https://github.com/symfony/symfony/security/advisories/GHSA-g3rh-rrhp-jhh9
• https://lists.debian.org/debian-lts-announce/2025/05/msg00051.html

Published

Nov 6, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-50338Git Credential Manager (GCM) is a secure Git credential help…7.4
• CVE-2024-50339GLPI is a free asset and IT management software package. Sta…5.3
• CVE-2024-5034The SULly WordPress plugin before 4.3.1 does not have CSRF c…8.8
• CVE-2024-50340symfony/runtime is a module for the Symphony PHP framework w…7.3
• CVE-2024-50341symfony/security-bundle is a module for the Symphony PHP fra…3.1
• CVE-2024-50342symfony/http-client is a module for the Symphony PHP framewo…4.3
• CVE-2024-50344I, Librarian is an open-source version of a PDF managing Saa…4.6
• CVE-2024-50345symfony/http-foundation is a module for the Symphony PHP fra…6.1
• CVE-2024-50346WebFeed is a lightweight web feed reader extension for Firef…5.1
• CVE-2024-50347Laravel Reverb provides a real-time WebSocket communication …6.3
• CVE-2024-50348InstantCMS is a free and open source content management syst…5.4
• CVE-2024-50349Git is a fast, scalable, distributed revision control system…4.7