[ Vendor · 1 CVEs ]
composer
CVEs affecting composer published in the last 30 days, plus any composer CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-59944 | 16 Sep 2026 | CVSS 6.1 | Composer: GHSA-gjfg-22fp-rrxx fix bypass via symlinked package bin pathComposer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and from 2.3.0 until 2.10.3, a malicious or compromised dependency can… | Fix |