Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly
Appearance settings

Commit 3d770c5

Browse filesBrowse files
fabpotfabpot
authored
data #64307 Release v8.1.0-BETA3
 Release v8.1.0-BETA3
2 parents aceb37b + ce29c96 commit 3d770c5
Copy full SHA for 3d770c5

2 files changed

+72-2Lines changed: 72 additions & 2 deletions

File tree

Expand file treeCollapse file tree
Open diff view settings
Filter options
Expand file treeCollapse file tree
Open diff view settings
Collapse file

‎CHANGELOG-8.1.md‎

Copy file name to clipboardExpand all lines: CHANGELOG-8.1.md
+70Lines changed: 70 additions & 0 deletions
  • Display the source diff
  • Display the rich diff
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,76 @@ in 8.1 minor versions.
77
To get the diff for a specific change, go to https://github.com/symfony/symfony/commit/XXX where XXX is the change hash
88
To get the diff between two versions, go to https://github.com/symfony/symfony/compare/v8.1.0...v8.1.1
99

10+
* 8.1.0-BETA3 (2026-05-20)
11+
12+
* security #cve-2026-46626 [Runtime] Fix CVE-2024-50340 patch bypass by gating argv on $_SERVER['QUERY_STRING'] (nicolas-grekas)
13+
* security #cve-2026-45754 [Notifier][Lox24] Reject webhooks with missing or invalid token (nicolas-grekas)
14+
* security #cve-2026-47212 [Notifier][Twilio] Reject webhooks with missing or invalid HMAC signature (nicolas-grekas)
15+
* security #cve-2026-45753 [HtmlSanitizer] Sanitize URLs in action, formaction, poster and cite attributes (nicolas-grekas)
16+
* security #cve-2026-45754 [Mailer][Mailjet] Reject webhooks with missing or invalid Basic credentials (alexandre-daubois)
17+
* security #cve-2026-45072 [TwigBridge] Fix XSS issue in CodeExtension::fileExcerpt() (nicolas-grekas)
18+
* security #cve-2026-45064 [HtmlSanitizer] Reject BiDi override characters and percent-encode spaces in URLs (nicolas-grekas)
19+
* security #cve-2026-45066 [HtmlSanitizer] Fix `allowLinkHosts`/`allowMediaHosts` bypass via URL parser differentials and `<area>` misclassification (alexandre-daubois)
20+
* security #cve-2026-45069 [Security] Add missing claims in `OidcTokenHandler` (alexandre-daubois)
21+
* bug #64301 [TwigBundle] Various fixes and hardenings (nicolas-grekas)
22+
* bug #64300 [TwigBridge] Fix daisyUI form layout and AppVariable locale filtering (nicolas-grekas)
23+
* bug #64296 [Serializer] Improve normalizer error reporting and deprecations (nicolas-grekas)
24+
* bug #64297 [Tui] Various fixes and hardenings (nicolas-grekas)
25+
* bug #64299 [TypeInfo] Harden ObjectShapeType (nicolas-grekas)
26+
* bug #64294 [RateLimiter] Harden calendar-aligned fixed window mode (nicolas-grekas)
27+
* bug #64291 [MonologBridge] Harden MailerHandler subject truncation (nicolas-grekas)
28+
* bug #64290 [Security] Various fixes and hardenings (nicolas-grekas)
29+
* bug #64287 [Translation] Various fixes and hardenings (nicolas-grekas)
30+
* bug #64286 [WebProfilerBundle] Various fixes and hardenings (nicolas-grekas)
31+
* bug #64283 [Lock] Various fixes and hardenings (nicolas-grekas)
32+
* bug #64285 [WebLink] Add missing `Link::AS_*` constants for `rel=preload` / `rel=modulepreload` (nicolas-grekas)
33+
* feature #64284 [PasswordHasher] Support stdin input and refine warning in security:hash-password (nicolas-grekas)
34+
* bug #64273 [HttpKernel] Various fixes and hardenings (nicolas-grekas)
35+
* bug #64276 [Runtime] Various fixes and hardenings (nicolas-grekas)
36+
* bug #64280 [Workflow] Various fixes and hardenings (nicolas-grekas)
37+
* bug #64275 [Routing] Fix missing HostTrait in ContentLoaderTrait (nicolas-grekas)
38+
* bug #64274 [SecurityBundle] Various fixes and hardenings (nicolas-grekas)
39+
* bug #64272 [Mailer] Preserve the sent message object as is when sending it (nicolas-grekas)
40+
* bug #64243 [HttpClient] Various fixes and hardenings (nicolas-grekas)
41+
* bug #64269 [HttpFoundation] Various fixes and hardenings (nicolas-grekas)
42+
* bug #64268 [FrameworkBundle] Various fixes and hardenings (nicolas-grekas)
43+
* bug #64263 [ExpressionLanguage] Various fixes and hardenings (nicolas-grekas)
44+
* bug #64262 [EventDispatcher] Various fixes and hardenings (nicolas-grekas)
45+
* bug #64256 [DomCrawler] Various fixes and hardenings (nicolas-grekas)
46+
* bug #64254 [DependencyInjection] Various fixes and hardenings (nicolas-grekas)
47+
* bug #64252 [AssetMapper] Various fixes and hardenings (nicolas-grekas)
48+
* bug #64251 [ObjectMapper] Various fixes and hardenings (nicolas-grekas)
49+
* bug #64250 [CssSelector] Various fixes and hardenings (nicolas-grekas)
50+
* bug #64249 [Form] Various fixes and hardenings (nicolas-grekas)
51+
* bug #64248 [Mailer] Various fixes and hardenings (nicolas-grekas)
52+
* bug #64239 [Validator] Various fixes and hardenings (nicolas-grekas)
53+
* bug #64237 [Messenger] Various fixes and hardenings (nicolas-grekas)
54+
* bug #64242 [TwigBridge] Require Twig to 3.25 for `EscaperRuntime` service definition (GromNaN)
55+
* bug #64258 [DomCrawler] Fix `ChoiceFormField::addChoice()` clobbering values on multi-selects (nicolas-grekas)
56+
* bug #64261 [Messenger] Fix PhpSerializer::getMessageType() when getting payload with Serializable instances (nicolas-grekas)
57+
* bug #64207 [MonologBridge] Fix `interactive_only` not preventing propagation (philbates35)
58+
* bug #64241 [JsonStreamer] Various fixes and hardenings (nicolas-grekas)
59+
* bug #64255 [DoctrineBridge] Various fixes and hardenings (nicolas-grekas)
60+
* bug #64246 [Console] Various fixes and hardenings (nicolas-grekas)
61+
* bug #64244 [Semaphore] Various fixes and hardenings (nicolas-grekas)
62+
* bug #64214 [HttpKernel] Preserve named-attribute override on Request/Session value resolvers (nicolas-grekas)
63+
* bug #64215 [Runtime] Fix TypeError when resolving untyped arguments (nicolas-grekas)
64+
* security #cve-2026-45305 [Yaml] Harden the Parser::cleanup() regexes against catastrophic backtracking (nicolas-grekas)
65+
* security #cve-2026-45304 [Yaml] Bound collection-alias resolution in the parser (nicolas-grekas)
66+
* security #cve-2026-45133 [Yaml] Bound recursion depth in the parser (nicolas-grekas)
67+
* security #cve-2026-45071 [DomCrawler] Fix XXE in addXmlContent() by not enabling `validateOnParse` (alexandre-daubois)
68+
* security #cve-2026-45068 [Mailer] Add end-of-options separator before recipients in SendmailTransport; reject addresses starting with a dash (alexandre-daubois)
69+
* security #cve-2026-45063 [Security] Anchor emailAddress regex to RDN boundary in X509Authenticator (alexandre-daubois)
70+
* security #cve-2026-45065 [Routing] Fix regex alternation anchoring in `UrlGenerator` requirement validation (alexandre-daubois)
71+
* security #cve-2026-45067 [Mime] Reject email addresses containing line breaks in Address (alexandre-daubois)
72+
* security #cve-2026-45073 [Cache] Validate the prefix given to AbstractAdapter::clear() (nicolas-grekas)
73+
* security #cve-2026-45077 [MonologBridge] Bind server:log to localhost by default (nicolas-grekas)
74+
* security #cve-2026-45755 [Mailer][Mailtrap] Reject webhooks with missing or invalid HMAC signature (alexandre-daubois)
75+
* security #cve-2026-45756 [JsonPath] Cap regex backtracking in `match()`/`search()` to prevent ReDoS (alexandre-daubois)
76+
* security #cve-2026-45074 [Security] Require configuring trusted hosts when using CAS authentication (nicolas-grekas)
77+
* security #cve-2026-45075 [Security][HttpKernel] Fix HEAD requests bypassing methods filter in `IsGranted`, `IsCsrfTokenValid` and `IsSignatureValid` attributes (nicolas-grekas)
78+
* bug #64213 [Security] Fix impersonation being deauthenticated on every request (nicolas-grekas)
79+
1080
* 8.1.0-BETA2 (2026-05-13)
1181

1282
* bug #64198 [SecurityBundle] Allow defining security provider factories without config (hockdudu)
Collapse file

‎src/Symfony/Component/HttpKernel/Kernel.php‎

Copy file name to clipboardExpand all lines: src/Symfony/Component/HttpKernel/Kernel.php
+2-2Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -45,12 +45,12 @@ abstract class Kernel extends AbstractKernel implements KernelInterface, Reboota
4545
private bool $resetServices = false;
4646
private bool $handlingHttpCache = false;
4747

48-
public const VERSION = '8.1.0-DEV';
48+
public const VERSION = '8.1.0-BETA3';
4949
public const VERSION_ID = 80100;
5050
public const MAJOR_VERSION = 8;
5151
public const MINOR_VERSION = 1;
5252
public const RELEASE_VERSION = 0;
53-
public const EXTRA_VERSION = 'DEV';
53+
public const EXTRA_VERSION = 'BETA3';
5454

5555
public const END_OF_MAINTENANCE = '01/2027';
5656
public const END_OF_LIFE = '01/2027';

0 commit comments

Comments
0 (0)
Morty Proxy This is a proxified and sanitized view of the page, visit original site.