← Back to home
wid-sec-w-2026-1128  ·  Published 2026-04-14  ·  View on BSI CERT-Bund ↗

Composer: Multiple Vulnerabilities allow Code execution

CVSS N/A NONE

Risk Summary

Ein Angreifer kann mehrere Schwachstellen in Composer ausnutzen, um beliebigen Programmcode auszuführen.

Affected Vendors

Open Source

Affected Products (4)

Open Source · Composer <2.9.6
Open Source · Composer 2.9.6
Open Source · Composer LTS <2.2.27
Open Source · Composer LTS 2.2.27

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more