Количество 10
Количество 10
CVE-2024-35242
Composer is a dependency manager for PHP. On the 2.x branch prior to versions 2.2.24 and 2.7.7, the `composer install` command running inside a git/hg repository which has specially crafted branch names can lead to command injection. This requires cloning untrusted repositories. Patches are available in version 2.2.24 for 2.2 LTS or 2.7.7 for mainline. As a workaround, avoid cloning potentially compromised repositories.
CVE-2024-35242
Composer is a dependency manager for PHP. On the 2.x branch prior to versions 2.2.24 and 2.7.7, the `composer install` command running inside a git/hg repository which has specially crafted branch names can lead to command injection. This requires cloning untrusted repositories. Patches are available in version 2.2.24 for 2.2 LTS or 2.7.7 for mainline. As a workaround, avoid cloning potentially compromised repositories.
CVE-2024-35242
Composer is a dependency manager for PHP. On the 2.x branch prior to v ...
GHSA-v9qv-c7wm-wgmf
Composer has multiple command injections via malicious git/hg branch names
BDU:2024-04880
Уязвимость компонента Branch Name Handler менеджера зависимостей для PHP Composer, позволяющая нарушителю выполнить произвольные команды
SUSE-SU-2024:2107-1
Security update for php-composer2
SUSE-SU-2024:2106-1
Security update for php-composer2
SUSE-SU-2026:1970-1
Security update for php-composer2
ROS-20240626-10
Множественные уязвимости composer
SUSE-SU-2026:3105-1
Security update for php-composer2
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-35242 Composer is a dependency manager for PHP. On the 2.x branch prior to versions 2.2.24 and 2.7.7, the `composer install` command running inside a git/hg repository which has specially crafted branch names can lead to command injection. This requires cloning untrusted repositories. Patches are available in version 2.2.24 for 2.2 LTS or 2.7.7 for mainline. As a workaround, avoid cloning potentially compromised repositories. | CVSS3: 8.8 | 3% Низкий | больше 2 лет назад |
 | CVE-2024-35242 Composer is a dependency manager for PHP. On the 2.x branch prior to versions 2.2.24 and 2.7.7, the `composer install` command running inside a git/hg repository which has specially crafted branch names can lead to command injection. This requires cloning untrusted repositories. Patches are available in version 2.2.24 for 2.2 LTS or 2.7.7 for mainline. As a workaround, avoid cloning potentially compromised repositories. | CVSS3: 8.8 | 3% Низкий | больше 2 лет назад |
| CVE-2024-35242 Composer is a dependency manager for PHP. On the 2.x branch prior to v ... | CVSS3: 8.8 | 3% Низкий | больше 2 лет назад |
| GHSA-v9qv-c7wm-wgmf Composer has multiple command injections via malicious git/hg branch names | CVSS3: 8.8 | 3% Низкий | больше 2 лет назад |
 | BDU:2024-04880 Уязвимость компонента Branch Name Handler менеджера зависимостей для PHP Composer, позволяющая нарушителю выполнить произвольные команды | CVSS3: 8.8 | 3% Низкий | больше 2 лет назад |
 | SUSE-SU-2024:2107-1 Security update for php-composer2 | больше 2 лет назад | ||
| SUSE-SU-2024:2106-1 Security update for php-composer2 | больше 2 лет назад | ||
| SUSE-SU-2026:1970-1 Security update for php-composer2 | 4 месяца назад | ||
 | ROS-20240626-10 Множественные уязвимости composer | CVSS3: 8.8 | около 2 лет назад | |
| SUSE-SU-2026:3105-1 Security update for php-composer2 | 2 месяца назад |
Уязвимостей на страницу