Symfony on Medium
·
News
Aggregated news about Symfony
Symfony Blog
·
CVE-2026-45070: Email Header Injection via Non-Token Characters in Mime Parameter Names
Affected versions
Symfony versions <5.4.52, >=6, <6.4.40, >=7, <7.4.12, >=8, <8.0.12 of the Symfony MIME component are affected by this security issue....
Symfony Blog
·
SymfonyOnline June 2026: Symfony Mate: Real Runtime Context for AI Coding Assistants
The wait is over! SymfonyOnline June 2026 is coming to you live online on June 11-12, 2026, featuring an incredible lineup of expert speakers. This year, we are shaking things up with...
Symfony Blog
·
CVE-2026-47212: Twilio Notifier Webhook Parser Never Verifies the X-Twilio-Signature HMAC: Unauthenticated Webhook Event Injection
Affected versions
Symfony versions >=6.4, <6.4.40, >=7.0, <7.4.12, >=8.0, <8.0.12 of the Symfony Twilio Notifier component are affected by this security...
Symfony Blog
·
CVE-2026-45755: Mailtrap Mailer Webhook Parser Never Verifies the X-Mt-Signature HMAC: Unauthenticated Webhook Event Injection
Affected versions
Symfony versions >=7.2, <7.4.12, >=8.0, <8.0.12 of the Symfony Mailtrap Mailer component are affected by this security issue.
The issue has been...
Symfony Blog
·
CVE-2026-45756: JsonPath Evaluates Attacker-Controlled Regular Expressions in match()/search() Without Limits: ReDoS
Affected versions
Symfony versions >=7.3, <7.4.12, >=8.0, <8.0.12 of the Symfony JSON Path component are affected by this security issue.
The issue has been fixed...
Symfony Blog
·
CVE-2026-45754: Mailjet and LOX24 Webhook Parsers Never Verify the Configured Secret: Unauthenticated Event Injection
Affected versions
Symfony versions >=6.4, <6.4.40, >=7.0, <7.4.12, >=8.0, <8.0.12 of the Symfony Lox24 Notifier and Symfony Mailjet Mailer components...
Symfony Blog
·
CVE-2026-46626: SymfonyRuntime CVE-2024-50340 Patch Bypass via parse_str/SAPI Argv Mismatch
Affected versions
Symfony versions >=5.4.46, <5.4.52, >=6.4.14, <6.4.40, >=7.1.7, <7.4.12, >=8, <8.0.12 of the Symfony Runtime component are...
Symfony Blog
·
SymfonyDay Montreal 2026: Migrating Legacy Symfony in Production
SymfonyDay Montreal 2026 is just around the corner, taking place on June 4 at L'Espace Quartier Latin (UQAM). Get ready for a day of high-level technical exchange!
🎤 Speaker...
Symfony on Medium
·
Symfony 8.1: Decoupling Application Bootstrapping from HTTP
Symfony Blog
·
New in Symfony 8.1: Validator Improvements
Symfony 8.1 improves the Validator component with new constraints, Clock
support, and reentrant validators.
New Xml Constraint...
Symfony on Medium
·
Why I Built Reactolith: The Missing Bridge Between Full-Stack Efficiency and React
Symfony Blog
·
SymfonyDay Montreal 2026: Reconfiguring Symfony in real time with sidekicks
SymfonyDay Montreal 2026 is calling! Join us on June 4, 2026, at L'Espace Quartier Latin (UQAM) for an exceptional day of technical deep dives and community networking.
🎤 Speaker...
Symfony Blog
·
New in Symfony 8.1: Improved Request Payload Mapping
Symfony controllers can map request data directly into typed PHP objects
using attributes such as #[MapRequestPayload] and #[MapQueryString].
This removes most of the boilerplate involved...
Symfony on Medium
·
12. Symfony Workflow vs DDD : Pourquoi privilégier les transitions explicites dans l’entité plutôt…
Symfony on Medium
·
11. API Platform et DDD : Découplage via les Ressources API, StateProcessors et StateProviders.
Symfony on Medium
·
Symfony 8.1: What Every PHP Developer Needs to Read Before June 2026
Symfony Blog
·
Twig 3.25.0 released
Twig 3.25.0 released
Twig 3.25.0 ships with a new needs_is_sandboxed option that lets
filters, functions, and tests adapt their behavior when running inside a
sandbox, makes the compiled...
Symfony on Medium
·
How to Write Audit Logs Asynchronously in Symfony with AuditTrailBundle
Symfony Blog
·
A Week of Symfony #1011 (May 11–17, 2026)
This week, Symfony published maintenance versions 6.4.39, 7.4.11, and 8.0.11. In addition, we announced the second beta release of Symfony 8.1. Finally, we shared the schedule for...
Latest jobs
🛡Entreprendre l'Avenir - Marques Simplis et Stello🛡️
**Développeur Backend PHP / Symfony Senior**
- Full time
- Full Remote en France (1 journée par mois à Paris - déplacements, hôtel et transport pris en charge)
🚐 Camping-Car Park 🚐
Lead Développeur·euse PHP/Symfony
- Full time
- Paris 2/3 Jours de TT + quelques déplacements à Pornic au début de la mission.