Symfony v7.3.7, v6.4.29 and v5.4.50 released!

[NewsBot]

Symfony v7.3.7, v6.4.29 and v5.4.50 has been released.

Changelog (Comparing v7.3.6...v7.3.7 · symfony/symfony · GitHub)

• security #cve-2025-64500 [HttpFoundation] Fix parsing pathinfo with no leading slash (@nicolas-grekas)
• bug #62333 Postal mailer transport message ID retrieval (@lalcebo)

[PR] Release v7.3.7 by fabpot · Pull Request #62366 · symfony/symfony · GitHub
[SECURITY] Security release

Link: Release v7.3.7 · symfony/symfony · GitHub

Changelog (Comparing v6.4.28...v6.4.29 · symfony/symfony · GitHub)

• security #cve-2025-64500 [HttpFoundation] Fix parsing pathinfo with no leading slash (@nicolas-grekas)

[PR] Release v6.4.29 by fabpot · Pull Request #62365 · symfony/symfony · GitHub
[SECURITY] Security release

Link: Release v6.4.29 · symfony/symfony · GitHub

Changelog (Comparing v5.4.49...v5.4.50 · symfony/symfony · GitHub)

• security #cve-2025-64500 [HttpFoundation] Fix parsing pathinfo with no leading slash (@nicolas-grekas)

[PR] Release v5.4.50 by fabpot · Pull Request #62364 · symfony/symfony · GitHub
[SECURITY] Security release

Link: Release v5.4.50 · symfony/symfony · GitHub