vulnerabilities in composer dependencies

ugh, composer.

There are 4 composer security advisories affecting our repositories.

swiftmailer/swiftmailer (CVE-2024-28859)

Deserialization Gadget chain in Swift Mailer

Affected repositories (1)

• mediawiki/extensions/SwiftMailer

symfony/http-foundation (CVE-2024-50345)

CVE-2024-50345: Open redirect via browser-sanitized URLs

Affected repositories (1)

• 🗄mediawiki/extensions/DonationInterface

symfony/http-foundation (CVE-2025-64500)

CVE-2025-64500: Incorrect parsing of PATH_INFO can lead to limited authorization bypass

Affected repositories (1)

• 🗄mediawiki/extensions/DonationInterface

symfony/cache (CVE-2026-45073)

CVE-2026-45073: SQL Injection in PdoAdapter::doClear() via Unsanitized $prefix

Affected repositories (1)

• mediawiki/skins/Aether

Source code is licensed under the AGPL.