StackRadar

GHSA-g2qj-pmxm-9f8f

Low

Advisory

Published 17 May 2021In the index since 8 Sept 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
9
of 17,781 indexed, latest versions
Container images
9
deployed by those charts
Fix available
1 of 1
affected package

User enumeration in authentication mechanisms

Carried by container images the latest versions of 9 of 17,781 indexed charts deploy, on 9 images.

Affected packageAffected versionsFixed inImages
symfony/security-httpcomposerv5.1.7, v5.1.8, v5.1.10, v5.1.115.2.89
OSV records
GHSA-g2qj-pmxm-9f8f

Charts affected

9 by stars
ChartLatestAffected imagesRadar Score
agendaserviceagendaservice1.0.01 of 3See more

agendaservice agendaservice 1.0.0

1 of the 3 container images this version deploys carry GHSA-g2qj-pmxm-9f8f.

Container imageDigestPackageFixed in
conduction/agendaservice-php:latest9cfeeb6c7c20
symfony/security-http@v5.1.10
5.2.8

Open the chart page →

7,209
balance-registrationbalance-registration0.1.01 of 4See more

balance-registration balance-registration 0.1.0

1 of the 4 container images this version deploys carry GHSA-g2qj-pmxm-9f8f.

Container imageDigestPackageFixed in
conduction/balance-registration-php:devc36094a41369
symfony/security-http@v5.1.10
5.2.8

Open the chart page →

8,408
checkin-componentcheckin-component0.1.01 of 4See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry GHSA-g2qj-pmxm-9f8f.

Container imageDigestPackageFixed in
conduction/checkin-component-php:dev3423845692c1
symfony/security-http@v5.1.10
5.2.8

Open the chart page →

8,408
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry GHSA-g2qj-pmxm-9f8f.

Container imageDigestPackageFixed in
conduction/conduction-ui-php:dev2744565516e8
symfony/security-http@v5.1.11
5.2.8

Open the chart page →

12,907
betaalservicecontacten-catalog1.0.01 of 3See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry GHSA-g2qj-pmxm-9f8f.

Container imageDigestPackageFixed in
conduction/betaalservice-php:latestece1ab544c57
symfony/security-http@v5.1.10
5.2.8

Open the chart page →

7,209
contactmoment-componentcontactmoment-component0.1.01 of 4See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry GHSA-g2qj-pmxm-9f8f.

Container imageDigestPackageFixed in
conduction/contactmoment-component-php:deve1d4ad1e22a8
symfony/security-http@v5.1.8
5.2.8

Open the chart page →

8,408
docparserdocparser0.1.01 of 4See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry GHSA-g2qj-pmxm-9f8f.

Container imageDigestPackageFixed in
conduction/docparser-php:devb6f95c8ead7d
symfony/security-http@v5.1.10
5.2.8

Open the chart page →

8,408
kvkkvkservice0.1.01 of 4See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry GHSA-g2qj-pmxm-9f8f.

Container imageDigestPackageFixed in
conduction/kvk-php:dev8f177f9f8a7b
symfony/security-http@v5.1.7
5.2.8

Open the chart page →

8,534
panproto-application-nldesign0.1.01 of 5See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry GHSA-g2qj-pmxm-9f8f.

Container imageDigestPackageFixed in
conduction/pan-php:dev24f03c57568f
symfony/security-http@v5.1.10
5.2.8

Open the chart page →

8,725

Container images carrying it

9 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
conduction/agendaservice-php:latest9cfeeb6c7c20
symfony/security-http@v5.1.10
5.2.8
1
conduction/balance-registration-php:devc36094a41369
symfony/security-http@v5.1.10
5.2.8
1
conduction/betaalservice-php:latestece1ab544c57
symfony/security-http@v5.1.10
5.2.8
1
conduction/checkin-component-php:dev3423845692c1
symfony/security-http@v5.1.10
5.2.8
1
conduction/conduction-ui-php:dev2744565516e8
symfony/security-http@v5.1.11
5.2.8
1
conduction/contactmoment-component-php:deve1d4ad1e22a8
symfony/security-http@v5.1.8
5.2.8
1
conduction/docparser-php:devb6f95c8ead7d
symfony/security-http@v5.1.10
5.2.8
1
conduction/kvk-php:dev8f177f9f8a7b
symfony/security-http@v5.1.7
5.2.8
1
conduction/pan-php:dev24f03c57568f
symfony/security-http@v5.1.10
5.2.8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.