Symfony Blog

Tobias Nyholm will introduce the Model Context Protocol (MCP), an open specification that lets AI clients discover your app's tools, and demonstrate the new official PHP mcp-sdk co-built by the Symfony AI initiative, showing how easily you can secure routes and leverage Symfony's bundle integration

Vincent Amstoutz will explore the practical reality of using AI as an autonomous security researcher to uncover complex injection paths, broken access control, and logic flaws that traditional rulesets miss, giving you a battle-tested strategy to weaponize LLMs against your own technical debt.

Symfony 8.1 curated new features

Read release notes

Format-less date LiveProps parsed with the permissive DateTime constructor

CSRF Protection Bypass in symfony/ux-live-component: Accept Header is CORS-Safelisted

Denial of service in symfony/ux-live-component via unbounded batch action requests

Information exposure via unescaped LIKE wildcards in EntitySearchUtil

LiveComponentHydrator HMAC checksum lacks component and slot binding

XSS in symfony/ux-autocomplete via unescaped AJAX response data