Merge pull request #751 from smnandre/cve-2025-47964

Add CVE-2025-47964 for Symfony UX Twig/Live Component

Author: stof

symfony/ux-live-component/CVE-2025-47946.yaml

@@ -0,0 +1,8 @@
+title:  "symfony/ux-live-component Unsanitized HTML attribute injection via ComponentAttributes"
+link:   https://symfony.com/blog/symfony-ux-cve-2025-47946-unsanitized-html-attribute-injection-via-componentattributes
+cve:    CVE-2025-47946
+branches:
+    2.x:
+        time:       2025-05-19 12:05:00
+        versions:   ['<2.25.1']
+reference: composer://symfony/ux-live-component

symfony/ux-twig-component/CVE-2025-47946.yaml

@@ -0,0 +1,8 @@
+title:  "symfony/ux-twig-component Unsanitized HTML attribute injection via ComponentAttributes"
+link:   https://symfony.com/blog/symfony-ux-cve-2025-47946-unsanitized-html-attribute-injection-via-componentattributes
+cve:    CVE-2025-47946
+branches:
+    2.x:
+        time:       2025-05-19 12:05:00
+        versions:   ['<2.25.1']
+reference: composer://symfony/ux-twig-component