CVE-2026-24739: Symfony Process Msys2 Incomplete Escapecve-2026-24739-symfony-process-msys2-incomplete-escape
An incomplete regular expression is used to check for characters that require escaping when spawning processes on Windows. This misses characters like '=', '[', ']', ';', '*', '?', '\'', and '$' which are treated as special by MSYS2 environments. Executing commands with these unquoted special tokens can lead to argument truncation, environment modification,
