Getcomposer vulnerabilities
We track 2 vulnerabilities in Getcomposer products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 10, 2024.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest Getcomposer vulnerabilities
- 8.8 High severity
composer: Improper Neutralization of Special Elements used in a Command
Composer is a dependency manager for PHP. On the 2.x branch prior to versions 2.2.24 and 2.7.7, the `composer install` command running inside a git/hg repository which has specially crafted branch names can lead to command injection. This requires cloning untr
- 8.8 High severity
composer: Improper Neutralization of Special Elements used in a Command
Composer is a dependency manager for PHP. On the 2.x branch prior to versions 2.2.24 and 2.7.7, the `status`, `reinstall` and `remove` commands with packages installed from source via git containing specially crafted branch names in the repository can be used