I brought up this Securing Laravel write-up because the CommonMark attributes extension XSS is the kind of issue that bites when configs change. It’s a good breakdown of what happened and why you should update dependencies and keep composer audit in your workflow.
You'll be taken to Securinglaravel to complete your purchase.