Sandbox property and method bypass via object-destructuring assignment

More info at https://symfony.com/cve-2026-46639...