ObjectNormalizer Dotted-Key Property-Path Traversal Bypasses #[Ignore] on Nested Objects

PKSA-y18k-qjc6-knrv

Affected package: symfony/serializer

Affected version: >=5.4.41,<5.4.56|>=6.4.9,<6.4.50|>=7.0.9,<7.1.0|>=7.1.2,<7.2.0|>=7.2.0,<7.3.0|>=7.3.0,<7.4.0|>=7.4.0,<7.4.23|>=8.0.0,<8.1.0|>=8.1.0,<8.1.11

Reported by:
FriendsOfPHP/security-advisories