symfony/ux-live-component: Denial of service via unbounded batch action requests (CVE-2026-49209) | HOL Guard CVE