[LOW] XSS in profiler HtmlDumper via unescaped template and profile names

PKSA-wwb1-81rc-pd65 CVE-2026-47730 GHSA-2g2g-8p8h-fgwm

Affected package: twig/twig

Affected version: >=3.0.0,<3.26.0

Reported by:
GitHub, FriendsOfPHP/security-advisories