Symfony 5.4.51 released

January 28, 2026 • Published by Fabien Potencier

Symfony 5.4 is backed by:

Ibexa is the leading DXP for Symfony developers. Ibexa DXP is used across the world by thousands of websites/shops/portals and supported by a fantastic, passionate community of developers, agencies, and users. We love Symfony!

Symfony 5.4.51 has just been released.

Read the Symfony upgrade guide to learn more about upgrading Symfony and use the SymfonyInsight upgrade reports to detect the code you will need to change in your project.

Tip

Want to be notified whenever a new Symfony release is published? Or when a version is not maintained anymore? Or only when a security issue is fixed? Consider subscribing to the Symfony Roadmap Notifications.

Changelog Since Symfony 5.4.50

security #cve-2026-24739 Fix escaping for MSYS on Windows (@nicolas-grekas)

Published in #Releases

Help the Symfony project!

As with any Open-Source project, contributing code or documentation is the most common way to help, but we also have a wide range of sponsoring opportunities.

Comments

Peter Dietrich said on Jan 28, 2026 at 09:28

The link to the CVE is a 404 🤔

Nicolas Grekas said on Jan 28, 2026 at 11:09

@Peter we first release the tag, then publish the blog post about the CVE, and that's when the link becomes active. It should become valid soon!