
Symfony 6.1.5 has just been released. Here is the list of the most important changes since 6.1.4:
- bug #47703 [Mailer][Mailjet] Apply the default value of 512 for max depth

Symfony 4.4.46 has just been released. Here is the list of the most important changes since 4.4.45:
- bug #47547 [Ldap] Do not run ldap_set_option on failed connection (@tat

Symfony 5.4.13 has just been released. Here is the list of the most important changes since 5.4.12:
- bug #47317 [Security] Fix login url matching when app is not run with u

Symfony 6.0.13 has just been released. Here is the list of the most important changes since 6.0.12:
- bug #47637 [FrameworkBundle] Fix passing serializer.default_context opt



Affected versions
Twig >1.0.0,1.44.7 || >2.0.0,2.15.3 || >3.0.0,3.4.3 are affected by this security issue.
The issue has been fixed in Twig 1.44.7, 2.15.3 and 3.4.3.
Description
When using the filesystem loader to load templates for which the name is a user input, it is possible to use the source
or include
statement to read arbitrary files from outside the templates directory when using a namesp

This week, Symfony development activity focused on finishing and polishing some new features for the upcoming Symfony 6.2 version, such us: updating codebase to use modern PHP features like null coalescing assignment and match statements; adding

