Skip to content
/ http-kernel Public
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: symfony/http-kernel
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v7.4.11
Choose a base ref
...
head repository: symfony/http-kernel
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v7.4.12
Choose a head ref
  • 11 commits
  • 8 files changed
  • 2 contributors

Commits on May 8, 2026

  1. [Security][HttpKernel] Fix HEAD requests bypassing methods filter in … 

    …`IsGranted`, `IsCsrfTokenValid` and `IsSignatureValid` attributes
    @nicolas-grekas
    nicolas-grekas committed May 8, 2026
    Configuration menu
    Copy the full SHA
    a6e1919 View commit details
    Browse the repository at this point in the history

Commits on May 13, 2026

  1. Update VERSION for 6.4.39

    @fabpot
    fabpot committed May 13, 2026
    Configuration menu
    Copy the full SHA
    7932974 View commit details
    Browse the repository at this point in the history

  2. Bump Symfony version to 6.4.40

    @fabpot
    fabpot committed May 13, 2026
    Configuration menu
    Copy the full SHA
    11161e6 View commit details
    Browse the repository at this point in the history

  3. Bump Symfony version to 7.4.12

    @fabpot
    fabpot committed May 13, 2026
    Configuration menu
    Copy the full SHA
    5491491 View commit details
    Browse the repository at this point in the history

Commits on May 15, 2026

  1. security #cve-2026-45075 [Security][HttpKernel] Fix HEAD requests byp… 

    …assing methods filter in `IsGranted`, `IsCsrfTokenValid` and `IsSignatureValid` attributes (nicolas-grekas)

This PR was merged into the 7.4 branch.
    @nicolas-grekas
    nicolas-grekas committed May 15, 2026
    Configuration menu
    Copy the full SHA
    32d4308 View commit details
    Browse the repository at this point in the history

  2. [HttpKernel] Preserve named-attribute override on Request/Session val… 

    …ue resolvers
    @nicolas-grekas
    nicolas-grekas committed May 15, 2026
    Configuration menu
    Copy the full SHA
    ed497ac View commit details
    Browse the repository at this point in the history

Commits on May 19, 2026

  1. Merge branch '6.4' into 7.4 

    * 6.4:
  [DomCrawler] Fix `ChoiceFormField::addChoice()` clobbering values on multi-selects
  [HttpKernel] Preserve named-attribute override on Request/Session value resolvers
  Remove wrong documentation
    @nicolas-grekas
    nicolas-grekas committed May 19, 2026
    Configuration menu
    Copy the full SHA
    3dfdbc7 View commit details
    Browse the repository at this point in the history

Commits on May 20, 2026

  1. Update VERSION for 6.4.40

    @fabpot
    fabpot committed May 20, 2026
    Configuration menu
    Copy the full SHA
    41dff5c View commit details
    Browse the repository at this point in the history

  2. Bump Symfony version to 6.4.41

    @fabpot
    fabpot committed May 20, 2026
    Configuration menu
    Copy the full SHA
    bb9cc96 View commit details
    Browse the repository at this point in the history

  3. Merge branch '6.4' into 7.4 

    * 6.4:
  [Runtime] Fix CVE-2024-50340 patch bypass by gating argv on $_SERVER['QUERY_STRING']
    @nicolas-grekas
    nicolas-grekas committed May 20, 2026
    Configuration menu
    Copy the full SHA
    952eea0 View commit details
    Browse the repository at this point in the history

  4. Update VERSION for 7.4.12

    @fabpot
    fabpot committed May 20, 2026
    Configuration menu
    Copy the full SHA
    7922b53 View commit details
    Browse the repository at this point in the history
Loading