GrepRules
Sign inPublish rule
Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
6965
Downloads
12.9M
Verified
6965
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
1 rules matched. Showing 1 loaded rules.
Publish rule
CVE-2026-50157: Symfony Authenticator Token In Querycve-2026-50157-symfony-authenticator-token-in-query

OAuth or bearer tokens should not be accepted from URL query parameters ($request->query), as query parameters can be leaked via server logs, browser history, and HTTP Referer headers. Extract tokens exclusively from the Authorization header instead.

PHPCVE-2026-50157CWE-598
by Provallyupdated 2026-10-27Apache-2.0
470 direct47 via packs
72
All matching rules loaded.