v8.1.0

Changelog (v8.1.0-RC1...v8.1.0)

• no significant changes

v8.1.0-RC1

Changelog (v8.1.0-BETA3...v8.1.0-RC1)

• security #cve-2026-48784 Fix dot-segment encoding for chained "../" and "./" in generated URLs (@nicolas-grekas)
• bug #64343 Harden __unserialize against __toString trampolines (@nicolas-grekas)

v8.0.13

Changelog (v8.0.12...v8.0.13)

• security #cve-2026-48784 Fix dot-segment encoding for chained "../" and "./" in generated URLs (@nicolas-grekas)
• bug #64343 Harden __unserialize against __toString trampolines (@nicolas-grekas)

v7.4.13

Changelog (v7.4.12...v7.4.13)

• security #cve-2026-48784 Fix dot-segment encoding for chained "../" and "./" in generated URLs (@nicolas-grekas)
• bug #64343 Harden __unserialize against __toString trampolines (@nicolas-grekas)

v6.4.41

Changelog (v6.4.40...v6.4.41)

• security #cve-2026-48784 Fix dot-segment encoding for chained "../" and "./" in generated URLs (@nicolas-grekas)
• bug #64343 Harden __unserialize against __toString trampolines (@nicolas-grekas)

v5.4.53

Changelog (v5.4.52...v5.4.53)

• security #cve-2026-48784 Fix dot-segment encoding for chained "../" and "./" in generated URLs (@nicolas-grekas)

v8.1.0-BETA3

Changelog (v8.1.0-BETA1...v8.1.0-BETA3)

• bug #64275 Fix missing HostTrait in ContentLoaderTrait (@nicolas-grekas)
• security #cve-2026-45065 Fix regex alternation anchoring in UrlGenerator requirement validation (@alexandre-daubois)

v8.0.12

Changelog (v8.0.9...v8.0.12)

• security #cve-2026-45065 Fix regex alternation anchoring in UrlGenerator requirement validation (@alexandre-daubois)

v7.4.12

Changelog (v7.4.9...v7.4.12)

• security #cve-2026-45065 Fix regex alternation anchoring in UrlGenerator requirement validation (@alexandre-daubois)

v6.4.40

Changelog (v6.4.37...v6.4.40)

• security #cve-2026-45065 Fix regex alternation anchoring in UrlGenerator requirement validation (@alexandre-daubois)