Most recent entries from all

BIT-composer-2021-41116 — Command injection in composer on Windows

Affected: Bitnami: composer

Composer is an open source dependency manager for the PHP language. In affected versions windows users running Composer to install untrusted dependencies are subject to command injection and should upgrade their composer version. Other OSs and WSL are not affected. The issue has been resolved in composer versions 1.10.23 and 2.1.9. There are no workarounds for this issue.

certfr-2022-avi-370 — De multiples vulnérabilités ont été découvertes dans Tenable.sc. Certaines d'entre elles permettent à un attaquant de p…

certfr-2022-avi-370

CLEANSTART-2024-SA12234 — Composer is an open source dependency manager for the PHP language

Affected: CleanStart: composer

Security vulnerability affects the composer package. Composer is an open source dependency manager for the PHP language.

EUVD-2026-31496

fkie_cve-2021-41116

GHSA-frqg-7g38-6gcf — Improper escaping of command arguments on Windows leading to command injection

Affected: Packagist: composer/composer

### Impact Windows users running Composer to install untrusted dependencies are affected and should definitely upgrade for safety. Other OSs and WSL are not affected.

### Patches 1.10.23 and 2.1.9 fix the issue

### Workarounds None

gsd-2021-41116

openSUSE-SU-2022:0132-1 — Security update for php-composer

Security update for php-composer

UBUNTU-CVE-2021-41116

Affected: Ubuntu:Pro:16.04:LTS: composer