CVE-2026-121971 - Symfony: ScopingHttpClient Sends the Credentials of Its Default Scope to Other Origins Through Network-Path References
CVE ID :CVE-2026-121971 Published : Nov. 4, 2026, 6:17 p.m. | 48 minutes ago Description :The component ScopingHttpClient in Symfony HttpClient merges the options of its default scope (such as auth_bearer or auth_basic) into a request before resolving a relative URL against the base_uri,...