LiveComponentHydrator HMAC checksum lacks component and slot binding
May 29, 2026
#Symfony UX
👍 1
Information exposure via unescaped LIKE wildcards in EntitySearchUtil
May 29, 2026
#Symfony UX
👍 1
XSS in symfony/ux-live-component via attacker-controlled child component tag
May 29, 2026
#Symfony UX
Denial of service in symfony/ux-live-component via unbounded batch action requests
May 29, 2026
#Symfony UX
Format-less date LiveProps parsed with the permissive DateTime constructor
May 29, 2026
#Symfony UX