Affected versions
Twig versions >=3.16.0,<3.19.0 are affected by this security issue.
The issue has been fixed in Twig 3.19.0.
Description
When using the null coalesce operator (??), output escaping was missing for the expression on the left side of… https://symfony.com/blog/twig-cve-2025-24374-missing-output-escaping-for-the-null-coalesce-operator?utm_source=Symfony%20Blog%20Feed&utm_medium=feed
Symfony 7.1.11 has just been released. Here is the list of the most important changes since 7.1.10:
bug #58889 [Serializer] Handle default context in Serializer (@Valmonzo)bug #59631 [HttpClient] Fix processing a NativeResponse after its client has… https://symfony.com/blog/symfony-7-1-11-released?utm_source=Symfony%20Blog%20Feed&utm_medium=feed
Symfony 6.4.18 has just been released. Here is the list of the most important changes since 6.4.17:
bug #58889 [Serializer] Handle default context in Serializer (@Valmonzo)bug #59631 [HttpClient] Fix processing a NativeResponse after its client has… https://symfony.com/blog/symfony-6-4-18-released?utm_source=Symfony%20Blog%20Feed&utm_medium=feed
Symfony 7.2.3 has just been released. Here is the list of the most important changes since 7.2.2:
bug #58889 [Serializer] Handle default context in Serializer (@Valmonzo)bug #59631 [HttpClient] Fix processing a NativeResponse after its client has been… https://symfony.com/blog/symfony-7-2-3-released?utm_source=Symfony%20Blog%20Feed&utm_medium=feed
SymfonyLive Paris 2025, conference in French language only, will take place from March 27 to 28! The schedule is currently being revealed as we go along. More details are available here.
Alors que nous dévoilons actuellement le programme de la… https://symfony.com/blog/symfonylive-paris-2025-developper-plus-vite-grace-a-frankenphp?utm_source=Symfony%20Blog%20Feed&utm_medium=feed
SymfonyLive Berlin 2025, conference held in English, will take place from April 1 to 4! The full schedule is available here. Today, is the last day to enjoy tickets at "regular" price, enjoy it here 🔥
💻 Workshop topics announcement!
This week, the upcoming Symfony 7.3 version improved the invokable command feature, deprecated the use of option arrays for configuring validation constraints, and updated the JsonEncoder component to allow warming up objects and lists. In addition, we announced… https://symfony.com/blog/a-week-of-symfony-943-20-26-january-2025?utm_source=Symfony%20Blog%20Feed&utm_medium=feed
SymfonyLive Berlin 2025, conference held in English, will take place from April 1 to 4! The schedule is being revealed gradually. More details are available here.
As we are now unveiling the main conference schedule, we’re thrilled to announce… https://symfony.com/blog/symfonylive-berlin-2025-need-a-mach-ready-search-engine?utm_source=Symfony%20Blog%20Feed&utm_medium=feed
SymfonyLive Paris 2025, conference in French language only, will take place from March 27 to 28! The schedule is currently being revealed as we go along. More details are available here.
Alors que nous dévoilons actuellement le programme de la… https://symfony.com/blog/symfonylive-paris-2025-roles-and-permissions-developpez-une-marque-blanche-avec-du-feature-flipping?utm_source=Symfony%20Blog%20Feed&utm_medium=feed
SymfonyLive Berlin 2025, conference held in English, will take place from April 1 to 4! The schedule is being revealed gradually. More details are available here.
First, a big thank you to everyone who submitted talk proposals! Your support means… https://symfony.com/blog/symfonylive-berlin-2025-so-you-think-you-know-phpunit?utm_source=Symfony%20Blog%20Feed&utm_medium=feed
