DO NOT PUBLISH SECURITY REPORTS PUBLICLY.

If you found any issues that might have security implications, please send a report to security[at]symfony.com

The full Security Policy is described in the official documentation.