Symfony Blog

All about Symfony releases, new Symfony features, and other important announcements

Less than a month to go: Get ready for SymfonyCon Vienna 2024!

Find out more about the schedule to help you get organized for these 2 exciting days!

November 7, 2024 #Conferences

New in Symfony 7.2 Console Finished Indicator

Symfony 7.2 allows customizing the indicator displayed when a Console command completes.

November 7, 2024 #Living on the edge ❤️ 14 👍 3 🚀 2

Twig CVE-2024-51755: Unguarded calls to __isset() and to array-accesses in a sandbox

Twig CVE-2024-51755: Unguarded calls to __isset() and to array-accesses in a sandbox

November 6, 2024 #Security Advisories #Twig 👀 1

Twig CVE-2024-51754: Unguarded calls to __toString() in a sandbox when an object is in an array or an argument list

Twig CVE-2024-51754: Unguarded calls to __toString() in a sandbox when an object is in an array or an argument list

November 6, 2024 #Security Advisories #Twig 🚀 1

CVE-2024-50340: Ability to change environment from query

CVE-2024-50340: Ability to change environment from query

November 6, 2024 #Security Advisories ❤️ 2 🚀 1

CVE-2024-50345: Open redirect via browser-sanitized URLs

CVE-2024-50345: Open redirect via browser-sanitized URLs

November 6, 2024 #Security Advisories 🚀 2

CVE-2024-51736: Command execution hijack on Windows with Process class

CVE-2024-51736: Command execution hijack on Windows with Process class

November 6, 2024 #Security Advisories

CVE-2024-50343: Incorrect response from Validator when input ends with `\n`

CVE-2024-50343: Incorrect response from Validator when input ends with `\n`

November 6, 2024 #Security Advisories

CVE-2024-50341: Security::login does not take into account custom user_checker

November 6, 2024 #Security Advisories 🚀 2

CVE-2024-50342: Internal address and port enumeration allowed by NoPrivateNetworkHttpClient

CVE-2024-50342: Internal address and port enumeration allowed by NoPrivateNetworkHttpClient

November 6, 2024 #Security Advisories