symfony/symfony and symfony/http-foundation are vulnerable to denial of service (DoS). It can happen because PDOSessionHandler class does not prevent storing sessions on a PDO connection. Therefore, with some configurations, it allows the attacker to send a malicious payload causing DoS.