Skip to content
OpenAdvisories

Package · Alpine

composer

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 1.3
    CVE-2025-67746

    Composer vulnerable to ANSI sequence injection

    Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer co…

    composer composer composer/composer composer Debian Ubuntu Alpine Packagist