[CRITICAL] Remote code execution

PKSA-fj9q-mr5j-8yxf CVE-2021-3129 GHSA-4qwp-7c67-jmcc

Affected version: >=2.5.0,<2.5.2|>=2.0.0,<2.4.2|<1.16.14

Reported by:
FriendsOfPHP/security-advisories, GitHub