CVE-2026-109449 | Sensiolabs Symfony up to 5.4.53/6.4.47/7.4.20/8.1.8 ExpressionLanguage ExpressionLanguage::lint resource consumption

October 15, 2026 Yanac

A vulnerability has been found in Sensiolabs Symfony up to 5.4.53/6.4.47/7.4.20/8.1.8 and classified as problematic. Impacted is the function ExpressionLanguage::lint of the component ExpressionLanguage. The manipulation leads to resource consumption.

This vulnerability is traded as CVE-2026-109449. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More