Issue #3064351 by larowlan, matt_paz, tsug0d, greggles: Pin composer.json to prevent installation of insecure versions of enshrined/svg-sanitize