GHSA-m884-279h-32v2 Exceptions displayed in non-debug configurations in Symfony

• Packagist symfony/error-handler: >= 4.4.0, < 4.4.4 → fixed in 4.4.4 • Packagist symfony/error-handler: >= 5.0.0, < 5.0.4 → fixed in 5.0.4 • Packagist symfony/symfony: >= 4.4.0, < 4.4.4 → fixed in 4.4.4 • Packagist symfony/symfony: >= 5.0.0, < 5.0.4 → fixed in 5.0.4

Description ----------- When `ErrorHandler` renders an exception HTML page, it uses un-escaped properties from the related Exception class to render the stacktrace. The security issue comes from the fact that the stacktraces were also displayed in non-`debug` environments. Resolution ---------- The `ErrorHandler` class now escapes all properties coming from the related Exception, and the stacktrace is not displayed anymore in non-`debug` environments. The patches for this issue are available here and here for branch 4.4. Credits ------- I would like to thank Luka Sikic for reporting & Yonel Ceruto and Jérémy Derussé for fixing the issue.