[HIGH] Ability to enable/disable PHP parsing in Yaml::parse()

PKSA-4y51-dgkc-x4zc CVE-2013-1348 GHSA-2r5h-6r7v-5m7c

Affected package: symfony/yaml

Affected version: >=2.0.0,<2.0.22

Reported by:
GitHub, FriendsOfPHP/security-advisories