PT-2023-33016 · Symfony · Symfony/Process

Published 2023-01-26 · Updated 2023-01-26

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions symfony/process (affected versions not specified)

Description A malicious Composer package called symfont/process was discovered, which is a typosquat targeting users of symfony/process. The package has been removed from Packagist.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GHSA-G3J5-MPP2-2FQM

Affected Products

Symfony/Process

References · 3

• https://osv.dev/vulnerability/GHSA-g3j5-mpp2-2fqm · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/symfont/process/2021-09-10.yaml · Note
• https://kernelmode.blog/typosquatting-malware-found-in-composer-repository · Note