In an effort to keep things a bit more secure (after finding out about this ) the symfony team has officially released their own security policy to help prevent issues like that in the future.

You may be wondering why it has been taking us such a long time to react. Here's the main reason: we had not a very strong security alert reporting and qualifying process.

This has been fixed recently. So as of now,...