Hi?@intelligentweb, thanks for providing more info.
I tested with the same version and scanned by Jetpack?Scan two times, but couldn’t get the same suspicious report. Maybe it’s a false positive.
Could you help to confirm if the reported line of code in the Normalizer.php is the same line as this line? https://github.com/symfony/polyfill-intl-normalizer/blob/v1.26.0/Normalizer.php#L40
If yes, then it would be a false positive.