Sandbox property allowlist bypass via the `column` filter (array_column on objects)

More info at https://symfony.com/cve-2026-46635...