Symfony's HttpFoundation component contains an open redirect vulnerability (CVE-2024-50345) due to inconsistent URI parsing between the Request class and browsers. This allows attackers to bypass validators relying on the Request class and redirect users to unintended domains. The issue affects multiple versions prior to fixed releases. A patch is available that enforces URI validation against the WHATWG URL specification.