Debian/composer: medium 4.3
Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI contr
Action: Upgrade composer to 2.9.3-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.9.3-1 | - |
Fixed versions
| 2.9.3-1 |
Sources
- osv: DEBIAN-CVE-2025-67746#Debian:14/composer
- https://security-tracker.debian.org/tracker/CVE-2025-67746
published · modified · JSON