Update composer.json

Updated dependency requirement for CVE-2014-4931