Advisories for Composer/La-Haute-Societe/Tcpdf package

An issue was discovered in TCPDF. Attackers can trigger deserialization of arbitrary data via the phar:// wrapper.