{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-22T05:46:22.810","vulnerabilities":[{"cve":{"id":"CVE-2024-50340","sourceIdentifier":"security-advisories@github.com","published":"2024-11-06T21:15:05.527","lastModified":"2026-04-15T00:35:42.020","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the `register_argv_argc` php directive is set to `on` , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by the kernel when handling the request. As of versions 5.4.46, 6.4.14, and 7.1.7 the `SymfonyRuntime` now ignores the `argv` values for non-SAPI PHP runtimes. All users are advised to upgrade. There are no known workarounds for this vulnerability."},{"lang":"es","value":"symfony/runtime es un módulo para el framework PHP Symphony que permite desacoplar las aplicaciones PHP del estado global. Cuando la directiva php `register_argv_argc` está establecida en `on` y los usuarios llaman a cualquier URL con una cadena de consulta especialmente manipulada, pueden cambiar el entorno o el modo de depuración utilizado por el núcleo al procesar la solicitud. A partir de las versiones 5.4.46, 6.4.14 y 7.1.7, `SymfonyRuntime` ahora ignora los valores `argv` para los entornos de ejecución PHP que no sean SAPI. Se recomienda a todos los usuarios que actualicen. No existen workarounds para esta vulnerabilidad."}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":3.4}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-74"}]}],"references":[{"url":"https://github.com/symfony/symfony/commit/a77b308c3f179ed7c8a8bc295f82b2d6ee3493fa","source":"security-advisories@github.com"},{"url":"https://github.com/symfony/symfony/security/advisories/GHSA-x8vp-gf4q-mw5j","source":"security-advisories@github.com"}]}}]}