Product by Getcomposer

    Composer

    9 known vulnerabilities in Composer (Getcomposer), 0 of them actively exploited (CISA KEV).

    Key figures

    9

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Composer (Getcomposer)
    HighCVE-2021-29472

    Composer: Argument Injection

    also in 3 other products

    		8.8
    HighCVE-2026-40261

    Composer has Command Injection via Malicious Perforce Reference

    also in 1 other product

    		8.8
    CriticalCVE-2021-41116

    Command injection in composer on Windows

    also in 1 other product

    		8.2
    HighCVE-2022-24828

    Missing input validation can lead to command execution in composer

    also in 2 other products

    		8.3
    HighCVE-2026-40176

    Composer is vulnerable to Command Injection via Malicious Perforce Repository

    also in 1 other product

    		7.8
    HighCVE-2023-43655

    Remote Code Execution via web-accessible composer.phar

    also in 2 other products

    		6.4
    HighCVE-2015-8371

    Getcomposer Composer: security vulnerability

    		8.8
    HighCVE-2024-24821

    Composer: Inclusion of Functionality from Untrusted Control Sphere

    also in 2 other products

    		8.8
    MediumCVE-2025-67746

    Composer vulnerable to ANSI sequence injection

    		4.3

    All products by Getcomposer