Fixes CVE-2023-50251 and CVE-2023-50262 DoS on parsing SVG

[joelpittet]

Description

❯ composer audit
Found 2 security vulnerability advisories affecting 2 packages:
+-------------------+----------------------------------------------------------------------------------+
| Package           | dompdf/dompdf                                                                    |
| CVE               | CVE-2023-50262                                                                   |
| Title             | Denial of service caused by infinite recursion when parsing SVG images           |
| URL               | https://github.com/advisories/GHSA-3qx2-6f78-w2j2                                |
| Affected versions | <2.0.4                                                                           |
| Reported at       | 2023-12-13T23:09:04+00:00                                                        |
+-------------------+----------------------------------------------------------------------------------+
+-------------------+----------------------------------------------------------------------------------+
| Package           | phenx/php-svg-lib                                                                |
| CVE               | CVE-2023-50251                                                                   |
| Title             | Denial of service caused by infinite recursion when parsing SVG document         |
| URL               | https://github.com/advisories/GHSA-ff5x-7qg5-vwf2                                |
| Affected versions | <0.5.1                                                                           |
| Reported at       | 2023-12-13T13:32:21+00:00                                                        |
+-------------------+----------------------------------------------------------------------------------+

Type of change

Please delete options that are not relevant.

• Bug fix (non-breaking change which fixes an issue)

How Has This Been Tested?

composer audit before and after upgrading the packages to the semver compatible releases.

Checklist:

• I have read the Contributing documentation available here: https://snipe-it.readme.io/docs/contributing-overview
• I have formatted this PR according to the project guidelines: https://snipe-it.readme.io/docs/contributing-overview#pull-request-guidelines