VulnerabilityBSI CERT-Bund
Composer: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Composer ausnutzen, um Sicherheitsmechanismen zu umgehen, um beliebige Dateien zu schreiben oder um Informationen offenzulegen. Zur erfolgreichen Ausnutzung sind teilweise bestimmte Konfigurationen erforderlich.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2026-22353 linked CVEs
Open advisory with all CVEs
More on Composer
Other advisories
- Mediumbsi:WID-SEC-2026-4254Composer: Mehrere Schwachstellen
- HighCVE-2026-111943Red Hat Security Advisory: osbuild-composer security update
- HighCVE-2026-111943Red Hat Security Advisory: osbuild-composer security update
- HighCVE-2026-111943Red Hat Security Advisory: osbuild-composer security update
- HighCVE-2026-111943Red Hat Security Advisory: osbuild-composer security update
- CriticalCVE-2026-111943Red Hat Security Advisory: osbuild-composer security update
- CriticalCVE-2026-111943Red Hat Security Advisory: osbuild-composer security update
- MediumCVE-2026-114702Nicdark ND Shortcodes For Visual Composer: Cross-Site-Scripting (XSS)
Other news entries
- Composer: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- NCSC-2026-0339 [1.00] [M/H] Kwetsbaarheden verholpen in HPE Networking Fabric ComposerNewsNCSC-NL
- 13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet SeedsNewsThe Hacker News
- Composer: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Composer: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Composer: Mehrere Schwachstellen ermöglichen CodeausführungVulnerabilityBSI CERT-Bund
- Composer: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux MalwareNewsThe Hacker News
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2235
ID