Affected versions
Symfony versions <5.4.46; >=6, <6.4.14; >=7, <7.1.7 of the Symfony HttpFoundation component are affected by this security issue.
The issue has been fixed in Symfony 5.4.46, 6.4.14, and 7.1.7.
Description
The Request class, does… https://symfony.com/blog/cve-2024-50345-open-redirect-via-browser-sanitized-urls?utm_source=Symfony%20Blog%20Feed&utm_medium=feed
Connectez-vous pour ajouter un commentaire
Autres messages de ce groupe
I'm very excited to announce the launch of Twig Playground, a new tool that allows you to test and experiment with Twig templates in a sandbox environment. It is entirely web-based, with no backend.
This week, Symfony development activity focused on fixing bugs in maintenance versions and adding new features for the upcoming Symfony 7.3 release. Meanwhile, we published blog posts about the new Tw
In the first part of this blog post we introduced exciting new Twig features like inline comments, PHP enums support, improved operator precedence, the guard tag, and enhanced deprecation handling. Th
After a pause, we’re excited to relaunch the publication of case studies in the Symfony community. Whether you’ve tackled challenging upgrades, solved complex technical issues, or transformed your tea
Twig 3.15 was released a few weeks ago and includes an impressive list of new features and improvements. This two-part blog post highlights the most important ones.
Inline Comments… https://symfony.c
This week, Symfony 7.2.1 was released as the first maintenance version of the 7.2 branch. Meanwhile, the upcoming Symfony 7.3 version introduced a new JsonEncoder component that is 10 times faster tha
Symfony 7.2.1 has just been released. Here is the list of the most important changes since 7.2.0:
bug #59145 [TypeInfo] Make Type::nullable method no-op on every nullable type (@mtarld)bug #5912
