[HIGH] CVE-2020-5275: All rules set in "access_control" are required when the firewall is configured with the unanimous strategy

PKSA-srh1-bn3t-m6gg CVE-2020-5275 GHSA-g4m9-5hpf-hx72

Affected package: symfony/security-http

Affected version: >=4.4.0,<4.4.7|>=5.0.0,<5.0.7

Reported by:
GitHub, FriendsOfPHP/security-advisories