composer

2 Products 8 CVEs

CVE Severity Distribution (All Time)

Critical

High

Medium

Low

Timeline Overview

Last 30 Days 0 CVEs

Last 6 Months 0 CVEs

Last Year 0 CVEs

Products

View all

composer

14 Versions 7 CVEs

windows-setup

1 Version 1 CVE

Recent CVEs

CVE-2024-35242 HIGH 1 year, 1 month ago

Composer is a dependency manager for PHP. On the 2.x branch prior to versions 2.2.24 and 2.7.7, the `composer install` command running inside a git/h…

CVE-2024-35241 HIGH 1 year, 1 month ago

Composer is a dependency manager for PHP. On the 2.x branch prior to versions 2.2.24 and 2.7.7, the `status`, `reinstall` and `remove` commands with …

CVE-2024-24821 HIGH 1 year, 5 months ago

Composer is a dependency Manager for the PHP language. In affected versions several files within the local working directory are included during the …

CVE-2023-43655 MEDIUM 1 year, 10 months ago

Composer is a dependency manager for PHP. Users publishing a composer.phar to a public web-accessible server where the composer.phar can be executed …

CVE-2022-24828 HIGH 3 years, 3 months ago

Composer is a dependency manager for the PHP programming language. Integrators using Composer code to call `VcsDriver::getFileContent` can have a cod…

CVE-2021-41116 HIGH 3 years, 9 months ago

Composer is an open source dependency manager for the PHP language. In affected versions windows users running Composer to install untrusted dependen…

CVE-2021-29472 HIGH 4 years, 3 months ago

Composer is a dependency manager for PHP. URLs for Mercurial repositories in the root composer.json and package source download URLs are not sanitize…

CVE-2020-15145 MEDIUM 4 years, 11 months ago

In Composer-Setup for Windows before version 6.0.0, if the developer's computer is shared with other users, a local attacker may be able to exploit t…