News
Aggregated news about Symfony
Symfony Blog
·
Affected versions
Symfony versions >=7.2, <7.4.13, >=8.0, <8.0.13 of the Symfony Mailomat
Mailer component are affected by this security issue.
The issue has been...
Symfony Blog
·
CVE-2026-48760: HtmlSanitizer URL Parser Underinclusive: Percent-Encoded BiDi Marks and Unicode Whitespace Bypass
Affected versions
Symfony versions >=6.1, <6.4.41, >=7, <7.4.13, >=8, <8.0.13 of the Symfony
HTML Sanitizer component are affected by this security issue....
Symfony Blog
·
CVE-2026-48784: UrlGenerator Encoding Skips Every Other Chained ../ or ./: Generated URL Collapses Off-Route
Affected versions
Symfony versions <5.4.53, >=6, <6.4.41, >=7, <7.4.13, >=8, <8.0.13 of the
Symfony Routing component are affected by this security...
Symfony Blog
·
CVE-2026-48736: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms: SSRF Bypass in NoPrivateNetworkHttpClient
Affected versions
Symfony versions >=6.4, <6.4.41, >=7.0, <7.4.13, >=8.0, <8.0.13 of the
Symfony HTTP Client and Symfony HTTP Foundation components are...
Symfony Blog
·
CVE-2026-48761: HtmlSanitizer Misses URL Attributes on object, applet, iframe, img and meta refresh
Affected versions
Symfony versions >=6.1, <6.4.41, >=7, <7.4.13, >=8, <8.0.13 of the Symfony
HTML Sanitizer component are affected by this security issue....
Symfony on Medium
·
Symfony UX Changed What Twig Can Do. Most Developers Missed It
Symfony Blog
·
SymfonyOnline June 2026: Symfony AI: Platform, Agent, and Store
Get ready for SymfonyOnline June 2026 This event will bring the international PHP community together online from June 11 to 12, 2026. This year, we are shaking things up with a brand-new...
Symfony on Medium
·
How to properly test PHP without database dependencies
Symfony Blog
·
CVE-2026-46644: insecure equivalence in symfony/polyfill-intl-idn for ASCII-only xn-- labels
Affected versions
Symfony versions >=1.17.1, <1.38.1 of the Symfony Polyfill and Symfony Polyfill Intl Idn components are affected by this security issue.
The issue has been...
Symfony Blog
·
Polyfill 1.38.1 released
Polyfill 1.38.1 is a security release that fixes a vulnerability in
symfony/polyfill-intl-idn. All users of this polyfill (directly or
through symfony/polyfill) should upgrade as soon...
JoliCode blog - Symfony
·
AFUP Day 2026 Paris, retour sur une journée dans l'écosystème PHP
Ce vendredi 22 mai 2026, l'équipe JoliCode était présente à l'AFUP Day 2026 Paris à l'ESGI Paris pour une journée de conférences. L'ambiance était conviviale et...
Symfony Blog
·
SymfonyDay Montreal 2026: CLI-Driven Development: An Ode to Symfony Console
Join the Symfony community in Montreal on June 4, 2026, at L'Espace Quartier Latin (UQAM). This edition features 9 expert talks in a single day! Register now.
🎤 Speaker announcement!...
Symfony Blog
·
New in Symfony 8.1: Improved Console Input
Symfony 8.1 ships many features related to the Console component, such as
HTTP-less Symfony applications, method-based commands, and
console argument resolvers. In addition, it includes...
Symfony on Medium
·
Singularity: Self‑Testing, Constraint‑Verified, Framework‑Aware design pattern
Symfony on Medium
·
Laravel Now Supports Passkeys by Default — Here’s What That Means for Developers
Symfony on Medium
·
Laravel Security Has Changed: Why Every composer update Now Deserves a Second Thought
Symfony on Medium
·
Claude Mythos Audited Symfony and Got a Perfect Score. Can Your CI/CD Say the Same?
Symfony Blog
·
A Week of Symfony #1012 (May 18–24, 2026)
This week, Symfony released 36 security advisories and published security releases 5.4.52, 6.4.40, 7.4.12, 8.0.12, 8.1.0 BETA3 and Twig 3.26.0. We also published an article about how...
Symfony on Medium
·
Stop N+1 Queries Forever: Advanced Doctrine ORM Strategies in Symfony 8.1
Symfony Blog
·
SymfonyDay Montreal 2026: The Hidden Cost of return new Response()
We look forward to seeing you on June 4, 2026, at L'Espace Quartier Latin (UQAM) for SymfonyDay Montreal 2026. A full day of learning and networking awaits!
🎤 Speaker announcement!...
Latest jobs
👚 SEZANE 👚
Développeur(se) backend sénior PHP / Symfony
- Full time
- Locaux magnifiques dans le 7ème, rue du bac. 2 jours de Télétravail par semaine. Possibilité de r...
👚 SEZANE 👚
Développeur(se) backend sénior PHP / Symfony
- Full time
- Locaux magnifiques dans le 7ème, rue du bac. 2 jours de Télétravail par semaine. Possibilité de r...
🚐 Camping-Car Park 🚐
Tech Lead - PHP/Symfony -POURVU
- Full time
- Paris 2/3 Jours de TT + quelques déplacements à Pornic au début de la mission.
🛡Entreprendre l'Avenir - Marques Simplis et Stello🛡️
**Développeur Backend PHP / Symfony Senior**
- Full time
- Full Remote en France (1 journée par mois à Paris - déplacements, hôtel et transport pris en charge)