https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 01:21:37 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-04879 bdu:2024-04879 https://cve.radiocsirt.org/vuln/bdu:2024-04879 https://cve.radiocsirt.org/vuln/bit-composer-2023-43655 <p><strong>Affected:</strong> Bitnami: composer</p> <p>Composer is a dependency manager for PHP. Users publishing a composer.phar to a public web-accessible server where the composer.phar can be executed as a php file may be subject to a remote code execution vulnerability if PHP also has `register_argc_argv` enabled in php.ini. Versions 2.6.4, 2.2.22 and 1.10.27 patch this vulnerability. Users are advised to upgrade. Users unable to upgrade should make sure `register_argc_argv` is disabled in php.ini, and avoid publishing composer.phar to the web as this is not best practice.</p> <p><strong>Affected:</strong> Bitnami: composer</p> <p>Composer is a dependency manager for PHP. Users publishing a composer.phar to a public web-accessible server where the composer.phar can be executed as a php file may be subject to a remote code execution vulnerability if PHP also has `register_argc_argv` enabled in php.ini. Versions 2.6.4, 2.2.22 and 1.10.27 patch this vulnerability. Users are advised to upgrade. Users unable to upgrade should make sure `register_argc_argv` is disabled in php.ini, and avoid publishing composer.phar to the web as this is not best practice.</p> https://cve.radiocsirt.org/vuln/bit-composer-2023-43655 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0966 certfr-2023-avi-0966 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0966 https://cve.radiocsirt.org/vuln/cleanstart-2024-om41616 <p><strong>Affected:</strong> CleanStart: composer</p> <p>Security vulnerability affects the composer package. Composer is a dependency manager for PHP.</p> <p><strong>Affected:</strong> CleanStart: composer</p> <p>Security vulnerability affects the composer package. Composer is a dependency manager for PHP.</p> https://cve.radiocsirt.org/vuln/cleanstart-2024-om41616 https://cve.radiocsirt.org/vuln/euvd-2026-245050 EUVD-2026-245050 https://cve.radiocsirt.org/vuln/euvd-2026-245050 https://cve.radiocsirt.org/vuln/fkie_cve-2023-43655 <p>Composer is a dependency manager for PHP. Users publishing a composer.phar to a public web-accessible server where the composer.phar can be executed as a php file may be subject to a remote code execution vulnerability if PHP also has `register_argc_argv` enabled in php.ini. Versions 2.6.4, 2.2.22 and 1.10.27 patch this vulnerability. Users are advised to upgrade. Users unable to upgrade should make sure `register_argc_argv` is disabled in php.ini, and avoid publishing composer.phar to the web as this is not best practice.</p> <p>Composer is a dependency manager for PHP. Users publishing a composer.phar to a public web-accessible server where the composer.phar can be executed as a php file may be subject to a remote code execution vulnerability if PHP also has `register_argc_argv` enabled in php.ini. Versions 2.6.4, 2.2.22 and 1.10.27 patch this vulnerability. Users are advised to upgrade. Users unable to upgrade should make sure `register_argc_argv` is disabled in php.ini, and avoid publishing composer.phar to the web as this is not best practice.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-43655 https://cve.radiocsirt.org/vuln/ghsa-jm6m-4632-36hf <p><strong>Affected:</strong> Packagist: composer/composer</p> <p>### Impact</p> <p>Users publishing a composer.phar to a public web-accessible server where the composer.phar can be executed as a php file may be impacted if PHP also has `register_argc_argv` enabled in php.ini.</p> <p>### Patches</p> <p>2.6.4, 2.2.22 and 1.10.27 patch this vulnerability.</p> <p>### Workarounds</p> <p>Make sure `register_argc_argv` is disabled in php.ini, and avoid publishing composer.phar to the web as this really should not happen.</p> <p><strong>Affected:</strong> Packagist: composer/composer</p> <p>### Impact</p> <p>Users publishing a composer.phar to a public web-accessible server where the composer.phar can be executed as a php file may be impacted if PHP also has `register_argc_argv` enabled in php.ini.</p> <p>### Patches</p> <p>2.6.4, 2.2.22 and 1.10.27 patch this vulnerability.</p> <p>### Workarounds</p> <p>Make sure `register_argc_argv` is disabled in php.ini, and avoid publishing composer.phar to the web as this really should not happen.</p> https://cve.radiocsirt.org/vuln/ghsa-jm6m-4632-36hf https://cve.radiocsirt.org/vuln/gsd-2023-43655 gsd-2023-43655 https://cve.radiocsirt.org/vuln/gsd-2023-43655 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13290-1 <p>php-composer2-2.6.4-1.1 on GA media</p> <p>php-composer2-2.6.4-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13290-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-43655 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: composer, Ubuntu:Pro:18.04:LTS: composer, Ubuntu:Pro:20.04:LTS: composer, Ubuntu:Pro:22.04:LTS: composer</p> <p>Composer is a dependency manager for PHP. Users publishing a composer.phar to a public web-accessible server where the composer.phar can be executed as a php file may be subject to a remote code execution vulnerability if PHP also has `register_argc_argv` enabled in php.ini. Versions 2.6.4, 2.2.22 and 1.10.27 patch this vulnerability. Users are advised to upgrade. Users unable to upgrade should make sure `register_argc_argv` is disabled in php.ini, and avoid publishing composer.phar to the web as this is not best practice.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: composer, Ubuntu:Pro:18.04:LTS: composer, Ubuntu:Pro:20.04:LTS: composer, Ubuntu:Pro:22.04:LTS: composer</p> <p>Composer is a dependency manager for PHP. Users publishing a composer.phar to a public web-accessible server where the composer.phar can be executed as a php file may be subject to a remote code execution vulnerability if PHP also has `register_argc_argv` enabled in php.ini. Versions 2.6.4, 2.2.22 and 1.10.27 patch this vulnerability. Users are advised to upgrade. Users unable to upgrade should make sure `register_argc_argv` is disabled in php.ini, and avoid publishing composer.phar to the web as this is not best practice.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-43655