CVE-2026-108082 raises a Symfony CPU-exhaustion alert
A post in r/PHP identifies CVE-2026-108082 as a Symfony regular-expression denial-of-service issue. It claims that a single request can consume CPU for several seconds. The excerpt names no affected Symfony versions or fixed releases. Nor does it give exploit details or a vendor advisory. Treat the report as an alert pending confirmation.
Comments
No comments yet — be the first.
Open the discussion
No account or password needed — just enter your e-mail and we’ll send you a one-time sign-in link. First time here? You’re set up automatically.
Your rating will be applied automatically after you sign in.
Check your inbox
We’ve sent a sign-in link to …. Open it on this device — this tab will sign you in automatically.
Nothing arrived? Check your spam folder — and mark the mail as "Not spam" so it lands in your inbox next time.