Debian/composer: medium 4.3
Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI contr
Action: Upgrade composer to 2.8.8-1+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.8.8-1+deb13u1 | - |
Fixed versions
| 2.8.8-1+deb13u1 |
Sources
- osv: DEBIAN-CVE-2025-67746#Debian:13/composer
- https://security-tracker.debian.org/tracker/CVE-2025-67746
published · modified · JSON