Priority HIGH 73
Composer before 2016-02-10 allows cache poisoning from other projects built on the same host.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00723 · Published 2023-09-21 · Fixed in 1.0.0 CWE-345
Priority MEDIUM 47
Composer is an open source dependency manager for the PHP language.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02825 · Published 2021-10-05 · Fixed in 1.10.23, 2.1.9 CWE-77
Priority MEDIUM 46
Composer is a dependency manager for PHP.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.03282 · Published 2024-06-10 · Fixed in 2.2.24, 2.7.7 CWE-77
Priority MEDIUM 46
Composer is a dependency manager for PHP.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04752 · Published 2021-04-27 · Fixed in 1.10.22, 2.0.13 CWE-88
Priority MEDIUM 44
Composer is a dependency manager for the PHP programming language.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01886 · Published 2022-04-13 · Fixed in 1.10.26, 2.2.12 +2 CWE-20
Priority MEDIUM 43
Composer is a dependency manager for PHP.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01688 · Published 2026-04-15 · Fixed in 2.9.6, 2.2.27 CWE-20
Priority MEDIUM 43
Composer is a dependency manager for PHP.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01532 · Published 2023-09-29 · Fixed in 2.2.22, 1.10.27 +1 CWE-74
Priority MEDIUM 42
Composer is a dependency manager for PHP.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0105 · Published 2024-06-10 · Fixed in 2.2.24, 2.7.7 CWE-77
Priority MEDIUM 41
Composer is a dependency Manager for the PHP language.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01021 · Published 2026-07-15 · Fixed in 1.10.28, 2.2.28 +1 CWE-200
Priority MEDIUM 40
Composer is a dependency Manager for the PHP language.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00279 · Published 2024-02-08 · Fixed in 2.2.23, 2.7 +1 CWE-829
Priority LOW 38
Composer is a dependency manager for PHP.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01045 · Published 2026-04-15 · Fixed in 2.9.6, 2.2.27 CWE-20
Priority LOW 36
Composer is a dependency Manager for the PHP language.
CVSS 4.0HIGH 7.7· Network · No auth · User interaction · EPSS 0.00502 · Published 2026-09-01 · Fixed in 2.2.30, 2.10.3 CWE-78
Priority LOW 36
In Composer-Setup for Windows before version 6.0.0, if the developer's computer is shared with other users, a local attacker may be able to exploit the following scenarios.
CVSS 3.1HIGH 8.2· Local · Low privileges · User interaction · EPSS 0.00409 · Published 2020-08-14 · Fixed in 6.0.0 CWE-276
Priority LOW 32
Composer is a dependency Manager for the PHP language.
CVSS 3.1HIGH 7.0· Local · No auth · User interaction · EPSS 0.00138 · Published 2026-07-08 · Fixed in 2.2.29, 2.10.2 CWE-22
Priority LOW 28
Composer is a dependency Manager for the PHP language.
CVSS 3.1MEDIUM 6.1· Local · No auth · User interaction · EPSS 0.0047 · Published 2026-09-16 · Fixed in 2.2.30, 2.10.3 CWE-22
Priority LOW 26
Composer is a dependency Manager for the PHP language.
CVSS 3.1MEDIUM 6.1· Local · No auth · User interaction · EPSS 0.00141 · Published 2026-07-08 · Fixed in 2.2.29, 2.10.2 CWE-22
Priority LOW 20
Composer is a dependency Manager for the PHP language.
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.0012 · Published 2026-07-08 · Fixed in 2.2.29, 2.10.2 CWE-532
Priority LOW 8
Composer is a dependency manager for PHP.
CVSS 4.0LOW 1.3· Network · Low privileges · No interaction · EPSS 0.00453 · Published 2025-12-30 · Fixed in 2.2.26, 2.9.3 CWE-74
THREATIST.IORead the docs