IA Squad
SearchPT
php · symfony/ux-live-componentHeads-up

symfony/ux-live-component: HMAC checksum now includes component name and slot identifier

The HMAC checksum for LiveComponent props now includes the component name and slot identifier (props vs propsFromParent) to prevent cross-component and cross-sl

20 Jun 2026Read 1 minSeverity: schedule it

What changed

The HMAC checksum for LiveComponent props now includes the component name and slot identifier (props vs propsFromParent) to prevent cross-component and cross-slot replay attacks.

Who it affects

Applications using symfony/ux-live-component with read-only LiveProp properties.

What to do today

Update symfony/ux-live-component to the latest patched version (2.x commit a224b5af3e2e33ee14ac71356ae0e0877900a81c or forward-ported 3.x).

The trail
Collected Audited Written Published