Symfony 5.4.55 has just been released.

Read the Symfony upgrade guide to learn more about upgrading Symfony and use the SymfonyInsight upgrade reports to detect the code you will need to change in your project.

Tip

Want to be notified whenever a new Symfony release is published? Or when a version is not maintained anymore? Or only when a security issue is fixed? Consider subscribing to the Symfony Roadmap Notifications.

Changelog Since Symfony 5.4.54

Console

  • bug #67576 [Console] Don't format escaped tags again when sections measure their lines (@nicolas-grekas)
  • minor #67482 [Console][SecurityBundle] Fix two tests that fail on every 5.4 pull request (@nicolas-grekas)

Mime

  • security #cve-2026-45070 [Mime] Reject parameter names containing non-token characters (@alexandre-daubois)
  • bug #67478 [Mime] Escape backslashes in Address::getEncodedName() (@munzzyy)
  • bug #67444 [Mime] Escape quotes and backslashes in quoted parameter values (@wleeaf)

Routing

  • bug #67508 [Routing] Don't ignore route conditions that are "0" (@nicolas-grekas)

Serializer

  • bug #67459 [Serializer] Escape formulas in the header row of CSV files (@nicolas-grekas)

WebProfilerBundle

  • bug #67450 [WebProfilerBundle] Check that the profiler is enabled before opening files (@nicolas-grekas)
Published in #Releases