symfony/ux-toolkit: Path Traversal Allows Arbitrary File Write and Read via Crafted Recipe Manifest (CVE-2026-55878) | HOL Guard CVE