Fixes CVE-2023-37260 upgrading league/oauth2-server

[joelpittet]

Description

composer audit
+-------------------+----------------------------------------------------------------------------------+
| Package           | league/oauth2-server                                                             |
| Severity          | high                                                                             |
| CVE               | CVE-2023-37260                                                                   |
| Title             | league/oauth2-server key exposed in exception message when passing as a string   |
|                   | and providing an invalid pass phrase                                             |
| URL               | https://github.com/advisories/GHSA-wj7q-gjg8-3cpm                                |
| Affected versions | >=8.5.0,<8.5.3|>=8.3.2,<8.4.2                                                    |
| Reported at       | 2023-07-06T21:07:27+00:00                                                        |
+-------------------+----------------------------------------------------------------------------------+

Type of change

Please delete options that are not relevant.

• Bug fix (non-breaking change which fixes an issue)

How Has This Been Tested?

Tested only with Composer as it's a low level patch release I don't expect any breaking changes.

Test Configuration:

PHP version: 7.4

Checklist:

• I have read the Contributing documentation available here: https://snipe-it.readme.io/docs/contributing-overview
• I have formatted this PR according to the project guidelines: https://snipe-it.readme.io/docs/contributing-overview#pull-request-guidelines
• My code follows the style guidelines of this project
• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• My changes generate no new warnings
• I have added tests that prove my fix is effective or that my feature works
• New and existing unit tests pass locally with my changes