Search by 
symfony/serializer Security Advisories for v2.0.9 (1)
-
XML decoding attack vector through external entities
Affected version: >=2.0.0,<2.0.11
Reported by:
FriendsOfPHP/security-advisories