CVE-2026-48747: Mailomat Mailer Webhook Parser Reads the HMAC Algorithm from the Request: Signature Algorithm Downgrade

PKSA-9y9v-rcsm-h82j CVE-2026-48747

Affected package: symfony/mailomat-mailer

Affected version: >=7.2.0,<7.3.0|>=7.3.0,<7.4.0|>=7.4.0,<7.4.13|>=8.0.0,<8.0.13

Reported by:
FriendsOfPHP/security-advisories