Red Hat Security Advisory

RHSA-2026:8165

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-04-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images composer-2.9.7-1.hum1@noarch@public-hummingbird-aarch64-rpms, composer-2.9.7-1.hum1@noarch@public-hummingbird-x86_64-rpms, composer-2.9.7-1.hum1@src

TI-2026-29055 CVE-2026-40261 · GHSA-gqw4-4w2p-838q

MEDIUM 43

Composer is a dependency manager for PHP.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01688 Published 2026-04-15 Fixed in 2.9.6, 2.2.27 CWE-20

TI-2026-28990 CVE-2026-40176 · GHSA-wg36-wvj6-r67p

LOW 38

Composer is a dependency manager for PHP.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01045 Published 2026-04-15 Fixed in 2.9.6, 2.2.27 CWE-20

TI-2025-41442 CVE-2025-67746 · GHSA-59pp-r3rg-353g

LOW 8

Composer is a dependency manager for PHP.

CVSS 4.0LOW 1.3 Network Low privileges No interaction EPSS 0.00453 Published 2025-12-30 Fixed in 2.2.26, 2.9.3 CWE-74