漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Composer vulnerable to ANSI sequence injection
Vulnerability Description
Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and potentially leading to confusion or DoS of the terminal application. There is no proven exploit and this has thus a low severity but we still publish a CVE as it has potential for abuse, and we want to be on the safe side informing users that they should upgrade. Versions 2.2.26 and 2.9.3 contain a patch for the issue.
CVSS Information
N/A
Vulnerability Type
输出中的特殊元素转义处理不恰当(注入)
Vulnerability Title
Composer 注入漏洞
Vulnerability Description
Composer是Composer开源的一个应用软件。提供一个声明，管理和安装PHP项目的依赖项。 Composer 2.2.26之前版本和2.9.3之前版本存在注入漏洞，该漏洞源于攻击者可能注入ANSI控制字符，可能导致终端输出混乱或拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A