The Serializer Builds UploadedFile Objects From Request Data, Letting a Client Point an Upload at Any Server File
November 4, 2026
#Security Advisories
#Symfony
Filesystem Path Treats Any Prefix Before "://" as a Root, Letting Paths Escape Their Base Directory
November 4, 2026
#Security Advisories
#Symfony
DataUriNormalizer Opens Data URIs With a Non-Lowercase Scheme as Local Files, Letting a Client Read Any Server File
November 4, 2026
#Security Advisories
#Symfony
Symfony 8.2 lets routes choose the firewall that handles them, and includes other improvements related to firewalls.
November 4, 2026
#Living on the edge
❤️ 4
👍 6
🚀 3
🎉 2
Dissecting the PHP2Shell vulnerability lifecycle in practice!
Volker Dusch takes the stage at SymfonyCon Warsaw 2026 to recount the discovery, remediation, and role of agentic AI security research in resolving this critical PHP exploit.
November 4, 2026
#Conferences
Rapid deployment and performance profiling with SymfonyCloud and Blackfire in practice!
Watch Vincent Robert build, profile with Blackfire, and safely ship an application live on stage at SymfonyCon Warsaw 2026!
November 3, 2026
#Conferences
Symfony 8.2 adds a new form type for collections whose entries use different form types, and an option to match submitted rows to their entries by identity instead of position.
November 3, 2026
#Living on the edge
❤️ 5
👍 3
🚀 3
🎉 2