Skip to content

Upgrading symfony/process 6 to 7

Breakingv6.4.49 → v7.4.22Security3Platform1New6Changed3Fixed29

Full comparisonBack to symfony/process
Fetching 49 releases from GitHub…48 / 49
BreakingUpgrade verdict

A platform requirement change and 3 security fixes.

In plain terms
  • This version now requires PHP 8.2 or newer.
  • A security fix makes sure commands are escaped correctly when running under MSYS on Windows.
  • On Windows, the shell is now located using the PATH environment variable before changing directory, closing a security weakness.
  • On Windows, the shell is now located using the PATH environment variable before changing directory, closing a security hole.
Must act 4 items need code or config changes

PHP requirement changed in v7.0.0-BETA1: >=8.1 → >=8.2.

What you must change

Security3
Fixes escaping for MSYS on Windows, addressing CVE-2026-24739.
Moderate · CVSS 6.3
v7.3.11GitHub ReleaseSummarizedView source
Uses PATH before CD to load the shell on Windows, addressing CVE-2024-51736.
v7.2.0-BETA2GitHub ReleaseSummarizedView source
Uses PATH before CD to load the shell on Windows, addressing CVE-2024-51736.
High · CVSS 8.4
v7.1.7GitHub ReleaseSummarizedView source
Platform1
Bumps the minimum PHP version to 8.2.
v7.0.0-BETA1GitHub ReleaseSummarizedView source