Skip to content
OpenAdvisories

Package · Alpine

composer

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-59944

    Composer: CVE-2026-59946 fix bypass via symlinked package bin path

    Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and from 2.3.0 until 2.10.3, a malicious or compromised dependency can bypass the earlier CVE-2026-59946 binary-path hardening because Composer validates literal parent-directory seg…

    composer composer composer/composer composer Debian Ubuntu Alpine Packagist
  • Medium 6.4
    CVE-2023-43655

    Remote Code Execution via web-accessible composer.phar

    Composer is a dependency manager for PHP. Users publishing a composer.phar to a public web-accessible server where the composer.phar can be executed as a php file may be subject to a remote code execution vulnerability if PHP also has `register_argc_argv` ena…

    composer composer composer/composer composer Debian Ubuntu Alpine Packagist