[LOW] symfony/ux-live-component LiveComponentHydrator HMAC checksum lacks component and slot binding

PKSA-wxdb-kw41-yhdy CVE-2026-49212 GHSA-34w5-c283-j9fg

Affected package: symfony/ux-live-component

Affected version: >=2.8.0,<2.36.0|>=3.0.0,<3.1.0

Reported by:
GitHub, FriendsOfPHP/security-advisories