2.5.1
Security
- Fix potential shell-command injection through the WeasyPrint binary path:
buildCommand()now verifies the binary is executable on the unescaped path and shell-escapes it before use - Update
symfony/processminimal version to mitigate CVE-2026-24739