github symfony/ux v2.11.2
ux-autocomplete security release + LiveComponent bugs

latest releases: v2.21.0, v2.9.2, v2.20.0...
14 months ago

Hi!

This release contains an important security release for symfony/ux-autocomplete: https://symfony.com/blog/cve-2023-41336-symfony-ux-autocomplete-prevent-injection-of-invalid-entity-ids-for-autocomplete-fields

If you are using symfony/ux-autocomplete, you should upgrade immediately:

composer update symfony/ux-autocomplete

Other changes:

LiveComponents

  • [bug] Only consider Live components in InterceptChildComponentRenderSubscriber by @sneakyvv in #1097
  • [bug] Don't store ux_live_component URLs in setTargetPath of the security component by @gbere in #1096

New Contributors

Full Changes: v2.11.1...v2.11.2

Don't miss a new ux release

NewReleases is sending notifications on new releases.