Article writen by Gabs Ferreira.January 20, 2012. That’s the date of the initial release of Meteor.js.Back then, the web was a very different place.Front-end development was dominated by jQuery for cross-browser compatibility and DOM manipulation.Responsive design was gaining traction, with Bootstrap standardizing mobile-friendly web design.
AddToAny
Feed items
Symfony 7.2.0-RC1 released
Symfony 7.2.0-RC1 has just been released.
Here is the list of the most important changes since 7.2.0-BETA2:
Update for CVE-2024-50342: Internal address and port enumeration allowed by NoPrivateNetworkHttpClient
The patch released last week for CVE-2024-50342 was incomplete. New versions have just been released to address it.
Sponsor the Symfony project.
CVE-2024-51996: Authentication Bypass via persisted RememberMe cookie
Affected versions
Symfony versions >=5.3, <5.4.47; >=6, <6.4.15; >=7, <7.1.8 of the Symfony Security-Http component are affected by this security issue.
The issue has been fixed in Symfony 5.4.47, 6.4.15, and 7.1.8.
Description
When consuming a persisted remember-me cookie, Symfony does not check if the username persisted in the database matches the username attached with the cookie, leading to authentication bypass.
Resolution
The PersistentRememberMeHandler class now ensures the submitted username is the cookie owner.
Symfony 7.1.8 released
Symfony 7.1.8 has just been released.
Here is the list of the most important changes since 7.1.7:
Symfony 6.4.15 released
Symfony 6.4.15 has just been released.
Here is the list of the most important changes since 6.4.14:
Symfony 5.4.47 released
Symfony 5.4.47 has just been released.
Here is the list of the most important changes since 5.4.46:
Dynamic Cache, Database, and Mail Builders in Laravel 11.31
The Laravel team released v11.31, which includes dynamic cache/db/mail builders, a cache token repository, a URL::forceHttps() convenience method, and more.