;
;

Symfony Blog

Most recent posts published on the Symfony project blog

SymfonyCon Warsaw 2026: Not All Messenger Transports Are Equal

Ready to level up your PHP and Symfony expertise? SymfonyCon Warsaw 2026 is coming to Poland on November 26-27! Join developers from around the glo...
Posted on 15 October 2026 | 12:30 pm

New in Symfony 8.2: Encrypted Doctrine Columns

The new KeyManagement component includes a Doctrine DBAL bridge with an EncryptedType that encrypts any column with envelope encryption. You need a...
Posted on 15 October 2026 | 8:46 am

CVE-2026-108082: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header

Affected versions Symfony HTTP Foundation versions >=5.4.1, <5.4.54, >=6.0.1, <6.4.46, >=7, <7.4.19, >=8, <8.1.7 are affect...
Posted on 15 October 2026 | 8:00 am

CVE-2026-109413: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process

Affected versions Symfony YAML versions <5.4.54, >=6, <6.4.45, >=7, <7.4.18, >=8, <8.1.6 are affected by this security issue. ...
Posted on 15 October 2026 | 8:00 am

CVE-2026-109449: Unbounded Nesting in the Expression Parser Lets Untrusted Expressions Crash the Process

Affected versions Symfony Expression Language versions <5.4.54, >=6, <6.4.48, >=7, <7.4.21, >=8, <8.1.9 are affected by this s...
Posted on 15 October 2026 | 8:00 am

Symfony UX 3.6 released

Symfony UX 3.6 is out, with more than 100 pull requests merged since 3.5.1. It adds three experimental packages, UX Inspector, UX Image and UX Rout...
Posted on 15 October 2026 | 7:00 am