CVE-2022-24894: Prevent storing cookie headers in HttpCache.
February 1, 2023
#Security Advisories
CVE-2022-24895: CSRF token fixation.
February 1, 2023
#Security Advisories
We want to thank all our Symfony 6.2 backers for their commitment to making the Symfony project sustainable!
January 31, 2023
#Community
#Symfony
Titouan Galopin will talk about the challenges we face when designing an API (long term stability, versioning, inclusion of sub-resources...) and how to address them in a Symfony API.
January 30, 2023
#Conferences
This week, Symfony 5.4.19, 6.0.19, 6.1.11 and 6.2.5 maintenance versions were released. The 6.0 and 6.1 branches will no longer receive any updates, so consider updating your projects to Symfony 6.2. Meanwhile, the upcoming Symfony 6.3 version marked DSNs as sensitive parameters and removed them from exception messages, added support for Redis Relay in cache and updated the VarDumper component to display all invisible characters.
January 29, 2023
#A week of symfony