[MEDIUM] Symfony UX allows unsanitized HTML attribute injection via ComponentAttributes

PKSA-1g87-trgd-pt11 CVE-2025-47946 GHSA-5j3w-5pcr-f8hg

Affected package: symfony/ux-twig-component

Affected version: <2.25.1

Reported by:
GitHub