Product by Debian
Composer
5 known vulnerabilities in Composer (Debian), 0 of them actively exploited (CISA KEV).
Key figures
5
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-35242 | Composer vulnerable to command injection via malicious git/hg branch names | 8.8 | |
| High | CVE-2021-29472 | Composer: Argument Injection | 8.8 | |
| High | CVE-2024-35241 | Composer vulnerable to command injection via malicious git branch name | 8.8 | |
| High | CVE-2023-43655 | Remote Code Execution via web-accessible composer.phar | 6.4 | |
| High | CVE-2024-24821 | Composer: Inclusion of Functionality from Untrusted Control Sphere | 8.8 |