Skip to content
Getcomposer vulnerabilities
Newest
-
composer, red hat hardened images +1 more
Composer is vulnerable to Command Injection via Malicious Perforce Repository
CVE-2026-40176
Public exploitFix available
7.8 High
-
composer, red hat hardened images +1 more
Composer has Command Injection via Malicious Perforce Reference
CVE-2026-40261
Public exploitFix available
8.8 High
-
composer
Composer vulnerable to ANSI sequence injection
CVE-2025-67746
Fix available
1.3 Low
-
composer, fedoraproject fedora +1 more
Composer vulnerable to command injection via malicious git/hg branch names
CVE-2024-35242
Public exploitFix available
8.8 High
-
composer, fedoraproject fedora +1 more
Composer vulnerable to command injection via malicious git branch name
CVE-2024-35241
Fix available
8.8 High
-
composer
Code execution and possible privilege escalation via compromised InstalledVersions.php or installed.php in Composer
CVE-2024-24821
Fix available
8.8 High
-
composer, debian linux, fedoraproject fedora +2 more
Remote Code Execution via web-accessible composer.phar
CVE-2023-43655
Fix available
6.4 Medium
-
getcomposer composer
Composer allows cache poisoning from other projects built on the same host
CVE-2015-8371
Fix available
8.8 High
-
composer, fedoraproject fedora, tenable tenable.sc +2 more
Missing input validation can lead to command execution in composer
CVE-2022-24828
Fix available
8.3 High
-
composer, tenable tenable.sc +1 more
Command injection in composer on Windows
CVE-2021-41116
Fix available
8.2 High
-
composer, debian linux, fedoraproject fedora +2 more
Missing argument delimiter can lead to code execution via VCS repository URLs or source download URLs on systems with Mercurial in composer
CVE-2021-29472
Fix available
8.8 High
-
getcomposer composer-setup, composer windows-setup +1 more
Local privilege elevation in Composer-Setup for Windows
CVE-2020-15145
6.7 Medium