CVE-2026-109413 - Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process
CVE ID :CVE-2026-109413 Published : Oct. 15, 2026, 3:17 p.m. | 16 minutes ago Description :In Symfony YAML prior to versions 5.4.54, 6.4.45, 7.4.18, and 8.1.6, Yaml\Parser::lexInlineStructure() recursed through lexInlineMapping() and lexInlineSequence() for every { and [ of an inline...