HtmlSanitizer URL Parser Deny Gates Underinclusive: Percent-Encoded BiDi Marks and Unicode Whitespace Bypass Visual-Spoofing Defense
May 27, 2026
#Security Advisories
#Symfony
IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms (6to4, NAT64, Teredo, IPv4-compatible): SSRF Bypass in NoPrivateNetworkHttpClient
May 27, 2026
#Security Advisories
#Symfony
Security Firewall Bypass via failure_forward Subrequest: Unauthenticated Access to access_control-Protected GET Routes
May 27, 2026
#Security Advisories
#Symfony
Christopher will tour the official Symfony AI initiative, exploring the Platform component and its uniform API across LLM providers, the Agent component with its multi-agent orchestration, and the Store component for RAG, complete with live demos featuring webcams and a look at the v1 roadmap.
May 26, 2026
#Conferences
symfony/polyfill-intl-idn accepts xn-- labels whose Punycode payload decodes to ASCII-only: insecure equivalence
May 26, 2026
#Security Advisories
#Symfony
👍 1
Thomas Durand will explore how to put the CLI at the heart of your development workflow, leveraging the full power of Symfony Console to automate tasks and improve developer productivity
May 26, 2026
#Conferences