This week Symfony published 2.7.49, 2.8.44, 3.3.18, 3.4.14, 4.0.14 and 4.1.3 security releases to fix two security vulnerabilities related to HTTP headers.
August 5, 2018
#A week of symfony
CVE-2018-14773 fixes a possible URL injection in HttpFoundation
August 1, 2018
#Security Advisories
CVE-2018-14774 fixes a possible host header injection when using HttpCache
August 1, 2018
#Security Advisories
This week Symfony 2.8.43, 3.4.13, 4.0.13, and 4.1.2 maintenance versions were released. 4.0.13 was the last version of the 4.0 branch which will keep receiving security fixes until January 2019.
July 29, 2018
#A week of symfony