@symfony.com on Bluesky

Post

Symfony

symfony.com

did:plc:3vin4t3r5d27f6dy76j7rd4u

🔐 CVE-2026-46638: `{% sandbox %}{% include %}` skips checkSecurity() on cached templates (incomplete fix for CVE-2024-45411) ➡️ https://symfony.com/blog/cve-2026-46638-sandbox-include-skips-checksecurity-on-cached-templates-incomplete-fix-for-cve-2024-45411

2026-05-20T10:32:42.260Z

Enable JavaScript to use Bluesky.

Learn more about Bluesky at bsky.social and atproto.com.