Missing TaintedCallable for ReflectionClass::newInstance()

[cgocast]

The following piece of code correctly raises a TaintedCallable :

<?php

$name = $_GET["name"];
new $name();

but the similar piece of code fails to raise a TaintedCallable :

<?php

$name = $_GET["name"];
$reflector = new ReflectionClass($name);
$reflector->newInstance();

[psalm-github-bot]

Hey @cgocast, can you reproduce the issue on https://psalm.dev ?

[cgocast]

Fixed by #10154