Symfony Polyfill vulnerabilities

• symfony polyfill, polyfill-intl-idn +1 more symfony/polyfill-intl-idn accepts xn-- labels whose Punycode payload decodes to ASCII-only: insecure equivalence CVE-2026-46644 Fix available 6.9 MediumMay 28, 2026