Twig Markdown-extra vulnerabilities

• symfony twig, twig cssinliner-extra, markdown-extra +2 more Twig: HTML-output filters in twig/* extras incorrectly declared `is_safe => ['all']` CVE-2026-46637 Fix available 5.1 MediumMay 21, 2026