Поиск уязвимостей
Количество 7
Количество 7
GHSA-frqg-7g38-6gcf
Improper escaping of command arguments on Windows leading to command injection
CVE-2021-41116
Composer is an open source dependency manager for the PHP language. In affected versions windows users running Composer to install untrusted dependencies are subject to command injection and should upgrade their composer version. Other OSs and WSL are not affected. The issue has been resolved in composer versions 1.10.23 and 2.1.9. There are no workarounds for this issue.
CVE-2021-41116
Composer is an open source dependency manager for the PHP language. In affected versions windows users running Composer to install untrusted dependencies are subject to command injection and should upgrade their composer version. Other OSs and WSL are not affected. The issue has been resolved in composer versions 1.10.23 and 2.1.9. There are no workarounds for this issue.
CVE-2021-41116
Composer is an open source dependency manager for the PHP language. In ...
openSUSE-SU-2022:0132-1
Security update for php-composer
ALT-PU-2022-1766
ALT-PU-2022-1766: package `composer` update to version 2.2.12-alt1
ALT-PU-2022-1775
ALT-PU-2022-1775: package `composer` update to version 2.2.12-alt2
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-frqg-7g38-6gcf Improper escaping of command arguments on Windows leading to command injection | CVSS3: 8.2 | 3% Низкий | около 5 лет назад |
 | CVE-2021-41116 Composer is an open source dependency manager for the PHP language. In affected versions windows users running Composer to install untrusted dependencies are subject to command injection and should upgrade their composer version. Other OSs and WSL are not affected. The issue has been resolved in composer versions 1.10.23 and 2.1.9. There are no workarounds for this issue. | CVSS3: 9.8 | 3% Низкий | около 5 лет назад |
 | CVE-2021-41116 Composer is an open source dependency manager for the PHP language. In affected versions windows users running Composer to install untrusted dependencies are subject to command injection and should upgrade their composer version. Other OSs and WSL are not affected. The issue has been resolved in composer versions 1.10.23 and 2.1.9. There are no workarounds for this issue. | CVSS3: 9.8 | 3% Низкий | около 5 лет назад |
| CVE-2021-41116 Composer is an open source dependency manager for the PHP language. In ... | CVSS3: 9.8 | 3% Низкий | около 5 лет назад |
 | openSUSE-SU-2022:0132-1 Security update for php-composer | больше 4 лет назад | ||
| ALT-PU-2022-1766 ALT-PU-2022-1766: package `composer` update to version 2.2.12-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
| ALT-PU-2022-1775 ALT-PU-2022-1775: package `composer` update to version 2.2.12-alt2 | CVSS3: 9.8 | больше 4 лет назад |
Уязвимостей на страницу