composer Latest Vulnerabilities

Latest vulnerabilities published by composer

15 July 2026

8 July 2026

15 April 2026

30 December 2025

22 April 2025

23 January 2025

10 June 2024

9 February 2024

29 September 2023

13 April 2022

5 October 2021

27 April 2021

14 August 2020

15 March 2020

composer Latest Vulnerabilities

Vulnerability Published:

Sort By:

15 July 2026

GitHub OAuth Token Validation Issue in Composer Dependency Manager

8 July 2026

Exposure of Credentials in Dependency Manager Versions by Composer

Remote File Write Vulnerability in Composer Dependency Manager by Composer

Path Traversal Vulnerability in Composer Dependency Manager

15 April 2026

Command Injection Flaw in Composer Affects PHP Dependency Management

Command Injection Vulnerability in Composer Dependency Manager by PHP

30 December 2025

Command Line Injection Vulnerability in Composer Dependency Manager

22 April 2025

Cross-Site Scripting Vulnerability in Visual Composer Website Builder by WPBakery

23 January 2025

Denial of Service Vulnerability in Docker Compose by Compose-Go Library

10 June 2024

Specially crafted branch names in Git repositories can execute code

Command Injection Vulnerability in Composer Affects PHP Projects

9 February 2024

Arbitrary Code Execution Vulnerability in Composer Affects PHP Developers

29 September 2023

Remote Code Execution via web-accessible composer.phar

13 April 2022

Missing input validation can lead to command execution in composer

5 October 2021

Command injection in composer on Windows

27 April 2021

Missing argument delimiter can lead to code execution via VCS repository URLs or source download URLs on systems with Mercurial in composer

14 August 2020

Local privilege elevation in Composer-Setup for Windows

15 March 2020

Remote Command Execution in Docker Compose Remote API by Snyk