summarypicks

Laracon US 2026

06-02 01:50 PHP.net news & announcements

SymfonyOnline June 2026: Git, But Better: An Introduction to Jujutsu (jj)

06-02 01:30 Symfony Blog

Your Laravel Cloud Stack Now Scales to Zero and Wakes 20x Faster

06-01 23:00 Laravel Blog

SymfonyOnline June 2026: Event Streaming with Symfony Messenger

06-01 21:30 Symfony Blog

New in Symfony 8.1: Forms Improvements

06-01 20:22 Symfony Blog

A Week of Symfony #1013 (May 25–31, 2026)

05-31 16:10 Symfony Blog

Twig 3.27.1 released

05-31 02:13 Symfony Blog

SymfonyOnline June 2026: Building MCP Servers with the Official PHP SDK

05-30 17:30 Symfony Blog

SymfonyOnline June 2026: Hunting Vulnerabilities in Symfony with LLMs

05-29 21:30 Symfony Blog

Symfony 8.1 curated new features

05-29 18:53 Symfony Blog

Symfony 8.1.0 released

05-29 17:53 Symfony Blog

CVE-2026-49211: Information exposure via unescaped LIKE wildcards in EntitySearchUtil

05-29 16:31 Symfony Blog

CVE-2026-49208: Format-less date LiveProps parsed with the permissive DateTime constructor

05-29 16:31 Symfony Blog

CVE-2026-49209: Denial of service in symfony/ux-live-component via unbounded batch action requests

05-29 16:31 Symfony Blog

CVE-2026-49215: CSRF Protection Bypass in symfony/ux-live-component: Accept Header is CORS-Safelisted

05-29 16:31 Symfony Blog

CVE-2026-49216: XSS in symfony/ux-autocomplete via unescaped AJAX response data

05-29 16:31 Symfony Blog

CVE-2026-49210: XSS in symfony/ux-live-component via attacker-controlled child component tag

05-29 16:31 Symfony Blog

CVE-2026-49212: LiveComponentHydrator HMAC checksum lacks component and slot binding

05-29 16:31 Symfony Blog

Symfony UX 3.1.0 released

05-29 16:23 Symfony Blog

Symfony UX 2.36.0 released

05-29 16:15 Symfony Blog

SymfonyOnline June 2026: Giving voice to your agents, the Symfony AI way

05-29 01:00 Symfony Blog

New in Symfony 8.1: Dependency Injection Improvements

05-28 22:25 Symfony Blog

SymfonyOnline June 2026: Custom PHPStan Rules: Guardrails for AI-Assisted Symfony Code

05-28 00:30 Symfony Blog

New in Symfony 8.1: Improved JSON Streaming and Querying

05-27 23:18 Symfony Blog

CVE-2026-48806: Sandbox `__toString()` policy bypass via dynamic mapping keys

05-27 22:21 Symfony Blog

CVE-2026-48807: Sandbox `__toString()` policy bypass via `Traversable` in `join`/`replace` and `in`/`not in` operators

05-27 22:21 Symfony Blog

CVE-2026-48805: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php`

05-27 22:21 Symfony Blog

CVE-2026-48808: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`

05-27 22:21 Symfony Blog

CVE-2026-46636: Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders

05-27 22:21 Symfony Blog

SymfonyDay Montreal 2026: Using Symfony for successful Platform Development

05-27 21:30 Symfony Blog

Symfony 8.1.0-RC1 released

05-27 20:34 Symfony Blog

Symfony 8.0.13 released

05-27 19:31 Symfony Blog

CVE-2026-48747: Mailomat Webhook Parser Reads the HMAC Algorithm from the Request: Signature Algorithm Downgrade

05-27 18:44 Symfony Blog

CVE-2026-48760: HtmlSanitizer URL Parser Underinclusive: Percent-Encoded BiDi Marks and Unicode Whitespace Bypass

05-27 18:44 Symfony Blog

CVE-2026-48784: UrlGenerator Encoding Skips Every Other Chained ../ or ./: Generated URL Collapses Off-Route

05-27 18:44 Symfony Blog

CVE-2026-48736: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms: SSRF Bypass in NoPrivateNetworkHttpClient

05-27 18:44 Symfony Blog

CVE-2026-48761: HtmlSanitizer Misses URL Attributes on object, applet, iframe, img and meta refresh

05-27 18:44 Symfony Blog

Symfony 7.4.13 released

05-27 17:45 Symfony Blog

Symfony 6.4.41 released

05-27 17:30 Symfony Blog

Symfony 5.4.53 released

05-27 17:20 Symfony Blog

SymfonyOnline June 2026: Symfony AI: Platform, Agent, and Store

05-27 00:30 Symfony Blog

Managed Queues: Autoscaling Queue Workers on Laravel Cloud

05-27 00:15 Laravel Blog

CVE-2026-46644: insecure equivalence in symfony/polyfill-intl-idn for ASCII-only xn-- labels

05-26 23:09 Symfony Blog

Polyfill 1.38.1 released

05-26 22:59 Symfony Blog

SymfonyDay Montreal 2026: CLI-Driven Development: An Ode to Symfony Console

05-26 21:30 Symfony Blog

New in Symfony 8.1: Improved Console Input

05-26 16:36 Symfony Blog

松下幸之助氏の「AI偽動画」に注意　PHP研究所が再告知　津田健次郎さんによるTikTok提訴受け

05-26 14:15 ITmedia TOP STORIES 最新記事一覧

Introducing Moat: A Security Review for Your GitHub Account

05-25 20:30 Laravel Blog

A Week of Symfony #1012 (May 18–24, 2026)

05-24 16:40 Symfony Blog

SymfonyDay Montreal 2026: The Hidden Cost of return new Response()

05-22 21:30 Symfony Blog

Symfony UX 2.x Security Maintenance Update

05-22 20:18 Symfony Blog

New in Symfony 8.1: Messenger Improvements

05-22 15:39 Symfony Blog

Migrating a Hybrid Architecture to Laravel Cloud: Top Q&A Questions Answered

05-21 23:13 Laravel Blog

Claude Mythos Audited Symfony and Found 19 Vulnerabilities

05-21 16:25 Symfony Blog

How Webkul Built a $2M Open-Source Ecommerce Platform on Laravel

05-20 22:54 Laravel Blog

CVE-2026-45070: Email Header Injection via Non-Token Characters in Mime Parameter Names

05-20 22:37 Symfony Blog

SymfonyOnline June 2026: Symfony Mate: Real Runtime Context for AI Coding Assistants

05-20 21:30 Symfony Blog

CVE-2026-45754: Mailjet and LOX24 Webhook Parsers Never Verify the Configured Secret: Unauthenticated Event Injection

05-20 19:56 Symfony Blog

CVE-2026-46626: SymfonyRuntime CVE-2024-50340 Patch Bypass via parse_str/SAPI Argv Mismatch

05-20 19:56 Symfony Blog

CVE-2026-47212: Twilio Notifier Webhook Parser Never Verifies the X-Twilio-Signature HMAC: Unauthenticated Webhook Event Injection

05-20 19:56 Symfony Blog

CVE-2026-45756: JsonPath Evaluates Attacker-Controlled Regular Expressions in match()/search() Without Limits: ReDoS

05-20 19:56 Symfony Blog

CVE-2026-45755: Mailtrap Mailer Webhook Parser Never Verifies the X-Mt-Signature HMAC: Unauthenticated Webhook Event Injection

05-20 19:56 Symfony Blog

CVE-2026-47732: Sandbox: multiple `__toString()` policy bypasses via unguarded string coercion points

05-20 19:30 Symfony Blog

CVE-2026-46629: Unbounded formatter memoisation in twig/intl-extra keyed on template-controlled arguments

05-20 19:29 Symfony Blog

CVE-2026-46634: `template_from_string()` escapes a SourcePolicy-driven sandbox via synthesized template name

05-20 19:29 Symfony Blog

CVE-2026-46638: `{% sandbox %}{% include %}` skips checkSecurity() on cached templates (incomplete fix for CVE-2024-45411)

05-20 19:29 Symfony Blog

CVE-2026-46635: Sandbox property allowlist bypass via the `column` filter (array_column on objects)

05-20 19:29 Symfony Blog

CVE-2026-46633: PHP code injection via `{% use %}` template name

05-20 19:29 Symfony Blog

CVE-2026-46637: HTML-output filters in twig/* extras incorrectly declared `is_safe => ['all']`

05-20 19:29 Symfony Blog

CVE-2026-47730: XSS in profiler HtmlDumper via unescaped template and profile names

05-20 19:29 Symfony Blog

CVE-2026-46639: Sandbox property and method bypass via object-destructuring assignment

05-20 19:29 Symfony Blog

Symfony 6.4.40 released

05-20 18:13 Symfony Blog

Symfony 5.4.52 released

05-20 17:27 Symfony Blog

Twig 3.26.0 released

05-20 16:42 Symfony Blog

SymfonyDay Montreal 2026: Migrating Legacy Symfony in Production

05-19 21:30 Symfony Blog

New in Symfony 8.1: Validator Improvements

05-19 16:23 Symfony Blog

SymfonyDay Montreal 2026: Reconfiguring Symfony in real time with sidekicks

05-18 21:30 Symfony Blog

New in Symfony 8.1: Improved Request Payload Mapping

05-18 16:46 Symfony Blog

Twig 3.25.0 released

05-17 17:12 Symfony Blog

A Week of Symfony #1011 (May 11–17, 2026)

05-17 16:14 Symfony Blog

Building AI Agents with Laravel: No Python Required

05-15 22:38 Laravel Blog

SymfonyDay Montreal 2026: Symfony 8: The Hexagonal Track

05-15 20:30 Symfony Blog

Introducing Laravel PAO: Cleaner Output for AI Agents

05-15 03:50 Laravel Blog

New in Symfony 8.1: Translation Improvements

05-14 16:55 Symfony Blog

Symfony 8.1.0-BETA2 released

05-14 03:41 Symfony Blog

Symfony 8.0.11 released

05-14 03:23 Symfony Blog

Symfony 7.4.11 released

05-14 03:05 Symfony Blog

Symfony 6.4.39 released

05-14 02:54 Symfony Blog

SymfonyOnline June 2026: The schedule is live!

05-13 21:30 Symfony Blog

New in Symfony 8.1: Dynamic Controller Attributes

05-13 17:34 Symfony Blog

SymfonyDay Montreal 2026: Building TUIs in PHP: The Symfony Terminal Component

05-13 00:30 Symfony Blog

New in Symfony 8.1: Serialize Attribute

05-12 16:12 Symfony Blog

Longhorn PHP 2026 - Call For Papers

05-12 07:03 PHP.net news & announcements

New in Symfony 8.1: Improved Cache Attribute

05-11 15:55 Symfony Blog

A Week of Symfony #1010 (May 4–10, 2026)

05-10 16:06 Symfony Blog