Symfony 7.4.23 bundles a long list of security advisories across HtmlSanitizer, Serializer, HttpFoundation, Routing, Security, and more. Here's which ones matter for a typical Symfony app and why you should upgrade now.
Laravel backported a TokenGuard fix (CVE-2026-114509) to the 10.x line. A crafted array token like ?api_token[]=0 could match a real user through database type coercion. Here's the bug and why you should upgrade.
Symfony 8.1.10 fixes CVE-2026-45070 in the Mime component, which accepted parameter names containing non-token characters, plus a cluster of related mail-hardening fixes. Here's why PHP and Laravel teams should upgrade.
Symfony 5.4.54 and its 6.4, 7.4, and 8.1 siblings fix three high-severity CVEs, all reachable by one unauthenticated request. What each one does, and the exact versions that close them.
Predis 3.6.1 patches a real CRLF command smuggling CVE affecting Redis clusters. Here's what changed and why PHP/Laravel teams should upgrade now.
OAuth/OIDC hardening continues across Symfony, Doorkeeper, and MCP SDKs for a second week running, plus Predis's official CVE release, Mongoid's security patches disguised as a routine bump, and a queued breaking change in openai-python.
Security patches from Predis, Express, and Doorkeeper, plus new Anthropic and OpenAI SDK releases and real OpenTelemetry tracing landing in MongoDB's Python driver.
NestJS v12 ships native observability via @nestjs/observe, Oban unifies config, Phoenix switches JSON libraries, and Symfony patches three branches.
A practical look at APM tools for PHP and Laravel applications as of May 2026.
In the realms of computer science and software engineering, reusability and modularity are considered to be important design principles to keep in mind when building software programs. The key idea behind these principles is to write code in a way that does not concentrate all it’s operations in one place. ...
Errors are undesirable for users and you should do everything in your control to keep users away from them. However, they are of utmost importance for developers. They allow developers to understand the inaccuracies and vulnerabilities in their code by alerting them when their code breaks. They also provide relevant ...
PHP is a weakly typed language. This means that when initializing a variable in PHP, one doesn’t need to declare the variable type. PHP implicitly declares a data type for your variable. This can save you from prospective type errors in your code. When working with programming languages, it is ...
Memory leaks can happen in any language, including PHP. These memory leaks may happen in small increments that take time to accumulate, or in larger jumps that manifest quickly. Either way, if your app has a memory leak, sooner or later it will cause problems. The source of and solution ...
PHP’s JSON_Encode Function: Convert PHP to JSON PHP is a server-side scripting language for creating your website’s backend system that can serve webpages, communicate with databases, and exchange data over the internet. A decent backend framework like PHP needs to be capable of providing and processing data in any format ...
“All code and no logging makes John a black box error-prone system.” Logging is a key aspect of monitoring, troubleshooting and debugging your code. Not only does it make your project’s underlying execution more transparent and intelligible, but also more accessible in it’s approach. In a company or a community ...
When it comes to web development, middleware is often the key to ensuring everything connects up - even if some of the pieces don’t always matchup. HTTP Middleware is a mechanism used to conveniently filter HTTP requests coming into your web application. When it comes to PHP, frameworks often help ...
Software systems inevitably encounter situations that can cause failures and malfunctions which affect user experience, data integrity, and security. In this blog post, we will learn how to avoid these situations though Exception handling . We will focus on software exceptions and how to address them using PHP.
Last month we talked about the PHP monitoring landscape in 2019 and announced that Scout APM would soon be available for monitoring your Laravel applications too (as well as your Ruby, Python and Elixir apps of course!). Now that our PHP monitoring agent is ready for beta testing, we thought it would be a good idea to show you folks how easy it is to get started with it and to highlight the main features to the Laravel community.
There is no denying the popularity of PHP. It has been a constant force in the web development world since its release way back in 1995. And now in 2019, thanks to Laravel, it is still going as strong as ever! Here at Scout, recently we have been working hard on providing a PHP performance monitoring agent to sit alongside our existing ruby, python and elixir agents. Prior to us releasing this PHP agent, let’s take a look at the PHP ecosystem to see how Scout can complement the existing monitoring landscape.