Symfony: XXE (Local File Disclosure) in DomCrawler::addXmlContent() via validateOnParse = true (CVE-2026-45071) | HOL Guard CVE