Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Composer ausnutzen, um Informationen offenzulegen, Daten zu manipulieren oder beliebigen Code auszuführen.
Product
Composer ist ein Open-Source-Abhängigkeitsmanager für PHP-Projekte.
Revision history
-
#2
Neue Updates von Fedora aufgenommen
-
#1
Initiale Fassung
References
-
GitHub Security Advisory GHSA-jhfp-4ppm-crmm vom 2026-11-09
https://github.com/composer/composer/security/advisories/GHSA-jhfp-4ppm-crmm
-
GitHub Security Advisory GHSA-w6hj-6587-3jh5 vom 2026-11-09
https://github.com/composer/composer/security/advisories/GHSA-w6hj-6587-3jh5
-
GitHub Security Advisory GHSA-x82q-x274-r6pq vom 2026-11-09
https://github.com/composer/composer/security/advisories/GHSA-x82q-x274-r6pq
-
Fedora Security Advisory FEDORA-2026-36C0ABA2E1 vom 2026-11-12
https://bodhi.fedoraproject.org/updates/FEDORA-2026-36c0aba2e1
-
Fedora Security Advisory FEDORA-2026-479AF584C3 vom 2026-11-12
https://bodhi.fedoraproject.org/updates/FEDORA-2026-479af584c3
-
Fedora Security Advisory FEDORA-2026-AB2AAEA969 vom 2026-11-12
https://bodhi.fedoraproject.org/updates/FEDORA-2026-ab2aaea969
-
Fedora Security Advisory FEDORA-EPEL-2026-308FCA30BF vom 2026-11-12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-308fca30bf
-
Fedora Security Advisory FEDORA-EPEL-2026-8D9E3A7486 vom 2026-11-12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-8d9e3a7486
-
Fedora Security Advisory FEDORA-EPEL-2026-D02B793E7F vom 2026-11-12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-d02b793e7f