Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Composer 2.2.30 Security Update: Fixes Path Traversal, Command & Username Injection

github.com 2026-09-02 查看中文 →
Security Advisory GHSA-9h3s-5dvx-m776 High Composer
Affected:
  • Composer < 2.2.30
  • Composer 2.2.29
Fixed in:
  • 2.2.30
Referenced CVEs: CVE-2026-84361 · 7.7
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.
More from this source
Hermes Agent MCP tool/resource handling DoS: discovery and result amplification causing service unavailability 2026-09-02 js-yaml DoS via Empty Merge Sources: Root Cause & Fix Analysis 2026-09-02 js-yaml CVE-2026-64375: CPU DoS via Unbounded Empty Merge Sources with PoC 2026-09-02 js-yaml: maxTotalMergeKeys validation flaw in safeLoad with PoC 2026-09-02 YAML parser: O(N²) perf DoS via empty merge keys 2026-09-02
Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro