Validation bypass via newline-tolerant regex anchors

Improper input validation in affected Symfony Validator releases allows remote authenticated users to pass newline-terminated malformed values. Validators use end-of-string anchors that also match before a final newline, so CardScheme, CSS color, date, email, time, and URL checks accept trailing line-feed input. Exposure requires an application to invoke an affected validator on attacker-controlled data; confidentiality loss depends on that validation decision.