Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
symfony/runtime
8.2 @ b7ea1ab
3
Fixes
0
CVEs
HIGH
Peak severity
33.3%
Coverage
Highlights
Argument Injection: 1 prior fix. Scrutinize any change in this area.
SymfonyRuntime.php: most-fixed (3 issues). Treat as high-risk during review.
3 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Remote Code Execution: When register_argc_argv is enabled in php.ini, HTTP GET requests can populate $_SERVER['argv'] and $_SERVER['argc'], allowing remote attackers to pass arbitrary command-line arguments to applications executing in a web context, potentially leading to remote code execution.
Argument Injection: Attackers can bypass initial HTTP request detection (such as checking if $_GET is empty) by sending specifically crafted query strings that result in an empty $_GET array but still populate command-line arguments inside ArgvInput, triggering CLI-only behavior.
Auth Bypass: Failure to accurately verify the active SAPI before clearing or processing the global argv array allows attackers to inject arguments into web-based execution contexts, bypassing intended routing and access controls.