GHSA-mm6w-gr99-p3jj: Twig: Sandbox property and method bypass via object-destructuring assignment

Twig (a template engine) versions 3.24.0 and later had a vulnerability where object-destructuring assignment (a syntax for extracting values from objects) bypassed the sandbox security feature (a restriction system that controls what properties and methods templates can access). An attacker who could write to a sandboxed template could read any public property or call any public method, defeating the security restrictions that should have prevented this.