[LOW] HTML-output filters in twig/* extras incorrectly declared `is_safe => ['all']`

PKSA-7b1y-jwqf-x6v6 CVE-2026-46637 GHSA-jv8m-2544-3pg3

Affected package: twig/markdown-extra

Affected version: >=2.12.0,<3.0.0|>=3.0.0,<3.26.0

Reported by:
GitHub, FriendsOfPHP/security-advisories