X509Authenticator and X509AuthenticationListener Read Escaped RFC 2253 Commas and Bare Slashes Inside a DN Value as RDN Boundaries: Incomplete Fix for CVE-2026-45063
November 4, 2026
#Symfony
👍 1
Yesterday, we released Symfony 5.4.55, 6.4.49, 7.4.22 and 8.1.10. Their changelogs list security fixes that were announced before, which confused some of you. Here is what these releases change, and what you should do.
October 29, 2026
#Symfony
👍 2
Unbounded Nesting in the Expression Parser Lets Untrusted Expressions Crash the Process
October 15, 2026
#Symfony
Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process
October 15, 2026
#Symfony
ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header
October 15, 2026
#Symfony
The new symfony lsp:check command brings Symfony diagnostics to CI.
August 31, 2026
#Symfony
❤️ 12
👍 5
🚀 7
🎉 4
Symfony's official LSP server comes with a native VS Code extension.
August 17, 2026
#Symfony
❤️ 20
👍 10
🚀 9
🎉 5
Meet the Symfony AI Core Team
August 13, 2026
#Symfony
❤️ 27
👍 7
🚀 10
🎉 6
The content of "Symfony: The Fast Track" is now public on GitHub, and contributing is open to everyone.
June 20, 2026
#Symfony
❤️ 1
Symfony AI's Platform component gives your PHP application a single, vendor-agnostic interface to OpenAI, Anthropic, Gemini, Hugging Face, and dozens more — with multi-modal support, structured output to PHP objects, and decoupled model catalogs that update with Composer.
June 19, 2026
#Symfony
❤️ 11
👍 4
🚀 7
🎉 5