Symfony's October Security Releases: Three Ways a Single Request Can Hurt You
Symfony 5.4.54 and its 6.4, 7.4, and 8.1 siblings fix three high-severity CVEs, all reachable by one unauthenticated request. What each one does, and the exact versions that close them.