https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T00:42:28.308289+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-composer-2021-41116 BIT-composer-2021-41116 — Command injection in composer on Windows 2026-10-04T00:42:28.648275+00:00

Affected: Bitnami: composer

Composer is an open source dependency manager for the PHP language. In affected versions windows users running Composer to install untrusted dependencies are subject to command injection and should upgrade their composer version. Other OSs and WSL are not affected. The issue has been resolved in composer versions 1.10.23 and 2.1.9. There are no workarounds for this issue.

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-370 certfr-2022-avi-370 — De multiples vulnérabilités ont été découvertes dans Tenable.sc. Certaines d'entre elles permettent à un attaquant de p… 2026-10-04T00:42:28.648438+00:00 certfr-2022-avi-370 https://cve.radiocsirt.org/vuln/cleanstart-2024-sa12234 CLEANSTART-2024-SA12234 — Composer is an open source dependency manager for the PHP language 2026-10-04T00:42:28.648484+00:00

Affected: CleanStart: composer

Security vulnerability affects the composer package. Composer is an open source dependency manager for the PHP language.

 https://cve.radiocsirt.org/vuln/euvd-2026-31496 EUVD-2026-31496 2026-10-04T00:42:28.648520+00:00 EUVD-2026-31496 https://cve.radiocsirt.org/vuln/fkie_cve-2021-41116 fkie_cve-2021-41116 2026-10-04T00:42:28.648540+00:00

Composer is an open source dependency manager for the PHP language. In affected versions windows users running Composer to install untrusted dependencies are subject to command injection and should upgrade their composer version. Other OSs and WSL are not affected. The issue has been resolved in composer versions 1.10.23 and 2.1.9. There are no workarounds for this issue.

 https://cve.radiocsirt.org/vuln/ghsa-frqg-7g38-6gcf GHSA-frqg-7g38-6gcf — Improper escaping of command arguments on Windows leading to command injection 2026-10-04T00:42:28.648584+00:00

Affected: Packagist: composer/composer

### Impact Windows users running Composer to install untrusted dependencies are affected and should definitely upgrade for safety. Other OSs and WSL are not affected.

### Patches 1.10.23 and 2.1.9 fix the issue

### Workarounds None

 https://cve.radiocsirt.org/vuln/gsd-2021-41116 gsd-2021-41116 2026-10-04T00:42:28.648634+00:00 gsd-2021-41116 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0132-1 openSUSE-SU-2022:0132-1 — Security update for php-composer 2026-10-04T00:42:28.648656+00:00

Security update for php-composer

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-41116 UBUNTU-CVE-2021-41116 2026-10-04T00:42:28.648683+00:00

Affected: Ubuntu:Pro:16.04:LTS: composer

Composer is an open source dependency manager for the PHP language. In affected versions windows users running Composer to install untrusted dependencies are subject to command injection and should upgrade their composer version. Other OSs and WSL are not affected. The issue has been resolved in composer versions 1.10.23 and 2.1.9. There are no workarounds for this issue.