Advisories for Composer/Snipe-It package

snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)