Symfony UX 3.7 adds the experimental UX CSS package and Imagor and IPX bridges for UX Image, makes the UX Toolkit stable, fixes 13 LiveComponent bugs and speeds up pages with many components.
November 5, 2026
#Symfony UX
❤️ 7
🚀 5
🎉 4
Symfony UX 3.6 brings three experimental packages (Inspector, Image and Router), moves the Shadcn kit to the Nova style, and tests every Toolkit recipe in a real browser.
October 15, 2026
#Symfony UX
❤️ 6
🚀 5
🎉 1
Symfony UX 3.5 ships a new Pagination package, moves component attribute rendering to Twig itself, adds prop documentation via Twig comments, and brings twenty new Shadcn recipes to the UX Toolkit
September 21, 2026
#Symfony UX
❤️ 11
👍 3
🚀 3
🎉 1
Symfony UX 3.4 adds Bootstrap, dynamic components and icon locking.
August 4, 2026
#Symfony UX
❤️ 12
Symfony UX 3.3.0 adds Symfony Reprise support to StimulusBundle, two new Shadcn components (Sonner and Combobox), and a friendlier Toolkit installer.
July 15, 2026
#Symfony UX
❤️ 6
👍 3
🚀 3
Symfony UX 3.2.0 and 2.36.1 fix two security issues in UX Icons and UX Toolkit, while 3.2.0 also brings new TwigComponent, Toolkit and Native features.
June 19, 2026
#Symfony UX
❤️ 2
👍 3
Path Traversal in symfony/ux-toolkit Allows Arbitrary File Write and Read via Crafted Recipe Manifest
June 19, 2026
#Symfony UX
XSS in symfony/ux-icons via unsanitized SVG content in local files and Iconify on-demand responses
June 19, 2026
#Symfony UX
XSS in symfony/ux-autocomplete via unescaped AJAX response data
May 29, 2026
#Symfony UX
CVE-2026-49215 CSRF Protection Bypass in symfony/ux-live-component: Accept Header is CORS-Safelisted
CSRF Protection Bypass in symfony/ux-live-component: Accept Header is CORS-Safelisted
May 29, 2026
#Symfony UX