--- title: Symfony 6.4.43 released (Symfony Blog) | daily.dev description: Symfony 6.4.43 has been released with a large batch of bug fixes across numerous components including HttpClient, SecurityBundle, HttpFoundation, Serializer,... canonical: https://daily.dev/posts/symfony-6-4-43-released-symfony-blog--dhnkfonft twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Symfony 6.4.43 released (Symfony Blog) | daily.dev og:description: Symfony 6.4.43 has been released with a large batch of bug fixes across numerous components including HttpClient, SecurityBundle, HttpFoundation, Serializer,... og:url: https://daily.dev/posts/symfony-6-4-43-released-symfony-blog--dhnkfonft og:image: https://api.daily.dev/og/posts/dhNkfonFT.png og:image:alt: Symfony 6.4.43 released (Symfony Blog) og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Symfony 6.4.43 released (Symfony Blog) **[Symfony](https://daily.dev/sources/symfony)** · 6 min read · 1 upvotes · 0 comments ## Summary Symfony 6.4.43 has been released with a large batch of bug fixes across numerous components including HttpClient, SecurityBundle, HttpFoundation, Serializer, Cache, Mailer, Messenger, Console, AssetMapper, Yaml, Validator, and more. Notable fixes include stripping Proxy-Authorization headers on cross-authority redirects, constraining redirect targets to the current host in SecurityBundle, validating cookie path/domain characters, and fixing several HttpClient redirect behaviors. Many minor translation updates for various locales are also included. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What does Symfony 6.4.43 fix in HttpClient regarding proxy authorization headers? Symfony 6.4.43 strips the Proxy-Authorization header on cross-authority redirects in HttpClient, preventing proxy credentials from leaking to a different host. The same release also stops HttpClient from forwarding the original Host header on cross-authority redirects, closing a related information disclosure risk. _Teams tracking Symfony patch releases for security-relevant HttpClient fixes can follow updates like this on daily.dev._ ### Does Symfony 6.4 work with PHP 8.6? Symfony 6.4.43 includes a fix to handle PHP 8.6's removal of function arguments from error messages, so applications on Symfony 6.4 running under PHP 8.6 avoid errors related to this change in argument reporting. This was addressed in pull request #64930. _Developers planning a PHP 8.6 upgrade can track compatibility fixes like this one on daily.dev._ ### Does Symfony 6.4 support Twig 4? Yes, Symfony 6.4.43 allows Twig 4 to be used, based on a minor change merged as pull request #64816. Previously Twig 4 compatibility was not permitted in the Symfony 6.4 branch. _Developers planning a Twig upgrade can watch for framework compatibility changes like this on daily.dev._ --- Tags: [#php](https://daily.dev/tags/php), [#symfony](https://daily.dev/tags/symfony) [View this post on daily.dev](https://daily.dev/posts/symfony-6-4-43-released-symfony-blog--dhnkfonft) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Symfony 6.4.43 released (Symfony Blog)","url":"https://daily.dev/posts/symfony-6-4-43-released-symfony-blog--dhnkfonft","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/symfony-6-4-43-released-symfony-blog--dhnkfonft"},"datePublished":"2026-07-29T12:30:23.186Z","dateModified":"2026-09-13T19:42:30.656Z","description":"Symfony 6.4.43 has been released with a large batch of bug fixes across numerous components including HttpClient, SecurityBundle, HttpFoundation, Serializer,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/327b244859fddae8f3a20d0225898aa0?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/327b244859fddae8f3a20d0225898aa0?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Symfony","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Symfony","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/cc07051b7112472f9729e73c14660a64","url":"https://daily.dev/sources/symfony"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/symfony-6-4-43-released-symfony-blog--dhnkfonft","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"php,symfony","timeRequired":"PT6M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Symfony","item":"https://daily.dev/sources/symfony"},{"@type":"ListItem","position":3,"name":"Symfony 6.4.43 released (Symfony Blog)"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/symfony-6-4-43-released-symfony-blog--dhnkfonft#faq","mainEntity":[{"@type":"Question","name":"What does Symfony 6.4.43 fix in HttpClient regarding proxy authorization headers?","acceptedAnswer":{"@type":"Answer","text":"Symfony 6.4.43 strips the Proxy-Authorization header on cross-authority redirects in HttpClient, preventing proxy credentials from leaking to a different host. The same release also stops HttpClient from forwarding the original Host header on cross-authority redirects, closing a related information disclosure risk. Teams tracking Symfony patch releases for security-relevant HttpClient fixes can follow updates like this on daily.dev."}},{"@type":"Question","name":"Does Symfony 6.4 work with PHP 8.6?","acceptedAnswer":{"@type":"Answer","text":"Symfony 6.4.43 includes a fix to handle PHP 8.6's removal of function arguments from error messages, so applications on Symfony 6.4 running under PHP 8.6 avoid errors related to this change in argument reporting. This was addressed in pull request #64930. Developers planning a PHP 8.6 upgrade can track compatibility fixes like this one on daily.dev."}},{"@type":"Question","name":"Does Symfony 6.4 support Twig 4?","acceptedAnswer":{"@type":"Answer","text":"Yes, Symfony 6.4.43 allows Twig 4 to be used, based on a minor change merged as pull request #64816. Previously Twig 4 compatibility was not permitted in the Symfony 6.4 branch. Developers planning a Twig upgrade can watch for framework compatibility changes like this on daily.dev."}}]} ```