tocsin

Debian/composer: medium 4.3

Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI contr

Action: Upgrade composer to 2.5.5-1+deb12u3 or later.

Affected

introducedfixedlast affected
02.5.5-1+deb12u3-

Fixed versions

2.5.5-1+deb12u3

Sources

published · modified · JSON