composer vulnerabilities (Bitnami)
16 vulnerabilities.
-
composerBitnami Composer: Perforce source URL permits P4PORT `rsh:` command execution 7.7 High -
composerBitnami Composer: CVE-2026-59946 fix bypass via symlinked package bin path 6.1 Medium -
composerBitnami Composer: URL-embedded HTTP-Basic username leaks to verbose logs (GitHub PAT exposure) 4.7 Medium -
composerBitnami Composer: Arbitrary file write outside vendor via malicious transitive package name 7.0 High -
composerBitnami Composer: Path traversal in package bin field lets dependencies chmod arbitrary host files 6.1 Medium -
composerBitnami Composer: Github Actions issued GITHUB_TOKEN disclosure in GitHub Actions logs 7.5 High -
composerBitnami Composer is vulnerable to Command Injection via Malicious Perforce Repository 7.8 High -
composerBitnami Composer has Command Injection via Malicious Perforce Reference 8.8 High -
composerBitnami Composer vulnerable to ANSI sequence injection 1.3 Low -
composerBitnami Composer vulnerable to command injection via malicious git/hg branch names 8.8 High -
composerBitnami Composer vulnerable to command injection via malicious git branch name 8.8 High -
composerBitnami Code execution and possible privilege escalation via compromised InstalledVersions.php or installed.php in Composer 8.8 High -
composerBitnami Remote Code Execution via web-accessible composer.phar 6.4 Medium -
composerBitnami Missing input validation can lead to command execution in composer 8.3 High -
composerBitnami Command injection in composer on Windows 8.2 High -
composerBitnami Missing argument delimiter can lead to code execution via VCS repository URLs or source download URLs on systems with Mercurial in composer 8.8 High