Changelog (v6.4.49...v6.4.50)
- security #GHSA-hqp2-7rr8-hf26 Ignore undeclared property paths when denormalizing (@nicolas-grekas)
- security #cve-2026-118515 Don't build UploadedFile and other file objects from denormalized data (@nicolas-grekas)
- security #GHSA-hqp2-7rr8-hf26 Ignore undeclared property paths when denormalizing (@nicolas-grekas)
- security #GHSA-pxj9-jh84-vhm5 Lowercase the scheme of data URIs before opening them (@nicolas-grekas)
- security #cve-2026-118515 Don't build UploadedFile and other file objects from denormalized data (@nicolas-grekas)
- bug #67752 Skip empty lines when decoding multi-column CSV documents (@0xABCD01)
- bug #67665 Fix denormalizing a data URI ending with slashes to a File (@ahmed-bhs)
[EOM] End of maintenance release for branch 6.4
[SECURITY] Security release