![Symfony 6.1.5 released](https://www.cdn5.niftycent.com/d/k/o/3/m/l/N/symfony-6-1-5-released.webp)
Symfony 6.1.5 has just been released. Here is the list of the most important changes since 6.1.4:
- bug #47703 [Mailer][Mailjet] Apply the default value of 512 for max depth
![Symfony 4.4.46 released](https://www.cdn5.niftycent.com/d/e/a/o/3/p/j/symfony-4-4-46-released.webp)
Symfony 4.4.46 has just been released. Here is the list of the most important changes since 4.4.45:
- bug #47547 [Ldap] Do not run ldap_set_option on failed connection (@tat
![Symfony 5.4.13 released](https://www.cdn5.niftycent.com/d/e/b/R/v/r/L/symfony-5-4-13-released.webp)
Symfony 5.4.13 has just been released. Here is the list of the most important changes since 5.4.12:
- bug #47317 [Security] Fix login url matching when app is not run with u
![Symfony 6.0.13 released](https://www.cdn5.niftycent.com/d/e/7/p/j/N/5/symfony-6-0-13-released.webp)
Symfony 6.0.13 has just been released. Here is the list of the most important changes since 6.0.12:
- bug #47637 [FrameworkBundle] Fix passing serializer.default_context opt
![SymfonyCon Disneyland Paris 2022: Voice of partner panel discussion: how Platform.sh agency partners drive innovation and growth](https://www.cdn5.niftycent.com/d/D/v/L/R/g/G/symfonycon-disneyland-paris-2022-voice-of-partner-panel-discussion-how-platform-sh-agency-partners-drive-innovation-and-growth.webp)
![SymfonyCon Disneyland Paris 2022: Building a great product means designing for your users.](https://www.cdn5.niftycent.com/d/1/G/X/g/4/Y/symfonycon-disneyland-paris-2022-building-a-great-product-means-designing-for-your-users.webp)
![Twig security release: Possibility to load a template outside a configured directory when using the filesystem loader](https://www.cdn5.niftycent.com/d/k/W/j/g/r/E/twig-security-release-possibility-to-load-a-template-outside-a-configured-directory-when-using-the-filesystem-loader.webp)
Affected versions
Twig >1.0.0,1.44.7 || >2.0.0,2.15.3 || >3.0.0,3.4.3 are affected by this security issue.
The issue has been fixed in Twig 1.44.7, 2.15.3 and 3.4.3.
Description
When using the filesystem loader to load templates for which the name is a user input, it is possible to use the source
or include
statement to read arbitrary files from outside the templates directory when using a namesp
![A Week of Symfony #821 (19-25 September 2022)](https://www.cdn5.niftycent.com/d/D/y/L/g/x/K/a-week-of-symfony-821-19-25-september-2022.webp)
This week, Symfony development activity focused on finishing and polishing some new features for the upcoming Symfony 6.2 version, such us: updating codebase to use modern PHP features like null coalescing assignment and match statements; adding
![SymfonyCon Disneyland Paris 2022: Focus on workshops!](https://www.cdn5.niftycent.com/d/e/r/K/7/x/v/symfonycon-disneyland-paris-2022-focus-on-workshops.webp)
![SymfonyCon Disneyland Paris 2022: All you need to know about transportation!](https://www.cdn5.niftycent.com/d/e/a/o/q/Q/Y/symfonycon-disneyland-paris-2022-all-you-need-to-know-about-transportation.webp)