Advisories for Composer/Area17/Twill package

twill is vulnerable to Cross-Site Request Forgery (CSRF)