Download Latest Version v5.4.54 source code.zip (111.3 kB) Google Add to Preferred Sources
Home / v5.4.54
Name Modified Size InfoDownloads / Week
Parent folder
README.md 2026-10-15 817 Bytes
v5.4.54 source code.tar.gz 2026-10-15 68.7 kB
v5.4.54 source code.zip 2026-10-15 111.3 kB
Totals: 3 Items   180.7 kB 0

Changelog (https://github.com/symfony/http-client/compare/v5.4.53...v5.4.54)

  • bug [#66938] Don't add the query option again to redirect targets in NoPrivateNetworkHttpClient (@nicolas-grekas)
  • bug [#66270] Don't reject highly compressed responses (@nicolas-grekas)
  • bug [#66080] Add missing non-routable ranges to NoPrivateNetworkHttpClient (@nicolas-grekas)
  • bug [#65751] Reject decompression bombs (@nicolas-grekas)
  • bug [#65740] Reject https:// proxies that curl would connect to in cleartext (@nicolas-grekas)
  • bug [#65731] Don't send the original Host header on cross-authority redirects (@nicolas-grekas)
  • bug [#65742] Reject 3xx pushed responses (@nicolas-grekas)
  • bug [#65704] Drop credentials when a redirect changes the scheme (@nicolas-grekas)

[SECURITY] Security release

Source: README.md, updated 2026-10-15