Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

composer — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in composer, with AI-generated Chinese analysis, references, and POCs.

Vendor: composer

CVE IDTitleCVSSSeverityPublished
CVE-2026-40261 Composer has Command Injection via Malicious Perforce Reference CWE-78 8.8 High2026-04-15
CVE-2026-40176 Composer is vulnerable to Command Injection via Malicious Perforce Repository CWE-20 7.8 High2026-04-15
CVE-2025-67746 Composer vulnerable to ANSI sequence injection CWE-74 8.1 -2025-12-30
CVE-2024-35242 Composer vulnerable to command injection via malicious git/hg branch names CWE-77 8.8 High2024-06-10
CVE-2024-35241 Composer vulnerable to command injection via malicious git branch name CWE-77 8.8 High2024-06-10
CVE-2024-24821 Code execution and possible privilege escalation via compromised InstalledVersions.php or installed.php in Composer CWE-829 8.8 High2024-02-08
CVE-2023-43655 Remote Code Execution via web-accessible composer.phar CWE-74 6.4 Medium2023-09-29
CVE-2022-24828 Missing input validation can lead to command execution in composer CWE-20 8.3 High2022-04-13
CVE-2021-41116 Command injection in composer on Windows CWE-77 8.2 High2021-10-05
CVE-2021-29472 Missing argument delimiter can lead to code execution via VCS repository URLs or source download URLs on systems with Mercurial in composer CWE-88 8.8 High2021-04-27

All 10 known CVE vulnerabilities affecting composer with full Chinese analysis, references, and POCs where available.