If you found any issues that might have security implications, please send a report to security[at]symfony.com DO NOT PUBLISH SECURITY REPORTS PUBLICLY.

The full Security Policy is described in the official documentation.