This is a security release which fixes two critical vulnerabilities in PHP:
- CVEs (GHSA-w8hw-w9fx-j79w / CVE-2026-109618 and GHSA-6wmf-4rv5-p3rp / CVE-2026-109619)
If you do not use the recommended Docker deployment, please ensure your PHP environment is updated accordingly.
What's Changed
- Bump symfony/routing from 6.4.16 to 6.4.41 by @dependabot[bot] in #60
- Bump symfony/http-foundation from 6.4.29 to 6.4.41 by @dependabot[bot] in #62
Full Changelog: 1.3...1.4