CVE-2018-11386 fixes a possible denial of service when using PDOSessionHandler.
May 25, 2018
#Security Advisories
CVE-2018-11408 fixes an open redirect vulnerability on DefaultAuthenticationSuccessHandler and DefaultAuthenticationFailureHandler.
May 25, 2018
#Security Advisories
CVE-2018-11406 fixes a possible CSRF token fixation.
May 25, 2018
#Security Advisories
In Symfony 4.1 there is a new choice_translation_locale option for some form types, a new command to delete cache items, allow_if expression can use custom expressions and you can use the new dd() debug helper.
May 25, 2018
#Living on the edge
Some small but nice new features added to Symfony 4.1: use csrf_token() without the Form component, parse env vars stored in CSV files, change progress bars dynamically and check more easily the contents of your .env files.
May 24, 2018
#Living on the edge