Adding another gadget chain for symfony1 (CVE-2024-28861)

Aligning file path with composer paths
Adding upper bounds for swiftmailer

friendsofsymfony1/swiftmailer/CVE-2024-28859.yaml

@@ -0,0 +1,14 @@
+title:     Deserialization Gadget chain in Swift Mailer
+link:      https://github.com/FriendsOfSymfony1/symfony1/security/advisories/GHSA-wjv8-pxr6-5f4r
+cve:       CVE-2024-28859
+branches:
+    4.x:
+        time:     null
+        versions: ['>=4.0.0', '<=4.3.1']
+    5.x:
+        time:     null
+        versions: ['>=5.0.0', '<=5.4.12']
+    6.x:
+        time:     2020-12-8 19:18:59
+        versions: ['>=6.0.0', '<6.30.0']
+reference: composer://friendsofsymfony1/swiftmailer

friendsofsymfony1/symfony1/CVE-2024-28861.yaml

@@ -0,0 +1,8 @@
+title:     Deserialization Gadget chain in Symfony sfNamespacedParameterHolder
+link:      https://github.com/FriendsOfSymfony1/symfony1/security/advisories/GHSA-pv9j-c53q-h433
+cve:       CVE-2024-28861
+branches:
+    1.x:
+        time:     2024-03-19 13:59:00
+        versions: ['>=1.1.0', '<1.15.19']
+reference: composer://friendsofsymfony1/symfony1

swiftmailer/swiftmailer/CVE-2024-28859.yaml

@@ -4,10 +4,10 @@ cve:       CVE-2024-28859
 branches:
     4.x:
         time:     null
-        versions: ['>=4.0.0']
+        versions: ['>=4.0.0', '<=4.3.1']
     5.x:
         time:     null
-        versions: ['>=5.0.0']
+        versions: ['>=5.0.0', '<=5.4.12']
     6.x:
         time:     2020-12-8 19:18:59
         versions: ['>=6.0.0', '<6.30.0']