Symfony Blog Comments

CVE-2026-45070: Email Header Injection via Non-Token Characters in Mime Parameter Names

AMR ALI — Fri, 22 May 2026 21:44:21 +0200

https://HOSTNAME/FederationMetadata/2007-06/FederationMetadata.xml

New in Symfony 8.1: Validator Improvements

Michael Brauner — Tue, 19 May 2026 20:12:59 +0200

Nice! I especially like the Clock-aware Comparison. Good job.

Symfony 7.4.11 released

Frank Krüger — Mon, 18 May 2026 15:54:26 +0200

User impersonation seems to be broken with Symfony 7.4.11 (see https://symfony.com/doc/7.4/security/impersonating_user.html), but we haven't figure out the reason yet.

New in Symfony 8.1: HTTP-Less Symfony Applications

Kirill Nesmeyanov — Mon, 18 May 2026 02:05:27 +0200

This is simply amazing! I've been waiting for this for a long time. The next logical step seems to be to add container inheritance/scopes/contexts, and then Symfony will be just perfect: ```php // as is $kernel = $builder->getContainer(); // separate for cli/web/gui/ws/etc $web = $builder->getScopedContainer($kernel, 'web'); $cli = $builder->getScopedContainer($kernel, 'cli'); // for runtime (i.e. doctrine em/connection/request stack/etc) deleted after each request $webRuntime = $builder->getScopedContainer($web, 'web.runtime'); ```

SymfonyDay Montreal 2026: Symfony 8: The Hexagonal Track

Tuhin Bepari — Sun, 17 May 2026 05:17:08 +0200

From 2022 to 2025, I worked on a Symfony project where the lead developer chose DDD simply because he liked it. We spent more than double the budget and delivered the same result a standard Symfony setup would have produced. The lesson: never add complexity your project doesn't actually need.

New in Symfony 8.1: Serialize Attribute

Andrey Lukin — Thu, 14 May 2026 15:18:34 +0200

Hey! Nice thing, thanks! maybe https://packagist.org/packages/chamber-orchestra/view-bundle could be considered as a solution as well

New in Symfony 8.1: Dynamic Controller Attributes

Javier Eguiluz — Wed, 13 May 2026 12:22:44 +0200

@Alexander you are right! I just updated the code example as you suggested. Thanks!

New in Symfony 8.1: Dynamic Controller Attributes

Alexander Schranz — Wed, 13 May 2026 11:15:19 +0200

The comment say: "// override the controller's #[Cache] attribute for this request only," but if I correctly understand the code it overrides all attributes and not only the given one? https://github.com/symfony/symfony/blob/236399779ade025aa0abb37f200cdcd171e5a59b/src/Symfony/Component/HttpKernel/Event/ControllerEvent.php#L56-L65 I think override a single one would be something like? ``` $attributes = $event->getAttributes(); $attributes[Cache::class] = new Cache(maxage: 60, public: true), $event->setController($event->getController(), \array_values($attributes)); ```

New in Symfony 8.1: Serialize Attribute

Marcus Artner — Tue, 12 May 2026 14:46:32 +0200

It seems to be it would've been smarter to have the attribute on the response object's class rather than on the controller - that way you can control the status code based on the response object.

New in Symfony 8.1: Serialize Attribute

Laszlo Lang — Tue, 12 May 2026 09:38:40 +0200

Cool. Thank you for your work!

New in Symfony 8.1: Serialize Attribute

Joris Mak — Tue, 12 May 2026 09:20:41 +0200

nice for making it more easier. but it was already pretty easy with the `->json()` return path right? :).

New in Symfony 8.1: Improved Cache Attribute

Michael Brauner — Mon, 11 May 2026 22:08:06 +0200

It's incredible how you've kept making Symfony better and better over the years. It's really great and very useful.

New in Symfony 8.1: Console Argument Resolvers

Jérôme Tamarelle — Mon, 11 May 2026 17:16:12 +0200

@Loïc, Good news: backed enum are supported by Invokable Commands since Symfony 7.4: https://symfony.com/blog/new-in-symfony-7-4-improved-invokable-commands#enum-support-in-invokable-commands

New in Symfony 8.1: Improved Cache Attribute

Oskar Barcz — Mon, 11 May 2026 10:50:56 +0200

Banger!

New in Symfony 8.1: Console Argument Resolvers

jeremyFreeAgent — Jérémy Romey — Fri, 08 May 2026 10:58:52 +0200

That's what I wanted!!! Thanks! <3

New in Symfony 8.1: Console Argument Resolvers

Loïc Faugeron — Fri, 08 May 2026 10:06:49 +0200

Backed Enum resolving will prove to be quite useful :)

New in Symfony 8.1: Deep Cloner

Ulumuddin Cahyadi Yunus — Fri, 08 May 2026 03:32:57 +0200

Awesome...

New in Symfony 8.1: HTTP-Less Symfony Applications

Evgeny — Thu, 07 May 2026 22:52:30 +0200

Sounds not good if you need & use only di-container ...

New in Symfony 8.1: Deep Cloner

Laszlo Lang — Thu, 07 May 2026 11:57:56 +0200

Awesome! 🚀️

New in Symfony 8.1: Method-Based Commands

Florent Destremau — Thu, 07 May 2026 09:43:01 +0200

It's kinda funny to see a push for invokable controllers and allowing multiple methods in a command :) At least it make sens to equalize the constraints