Skip to content
OpenAdvisories
Medium DLA-3777-1 1 CVE

composer - security update

Published Mar 27, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 composer 1.8.4-1+deb10u3

Vulnerabilities 1

  • Medium 6.4
    CVE-2023-43655

    Remote Code Execution via web-accessible composer.phar

    Composer is a dependency manager for PHP. Users publishing a composer.phar to a public web-accessible server where the composer.phar can be executed as a php file may be subject to a remote code execution vulnerability if PHP also has `register_argc_argv` ena…

    composer composer composer/composer composer Debian Ubuntu Alpine Packagist