tocsin

Alpine/composer: unknown

Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an untrusted composer.lock file could set s

Action: Upgrade composer to 2.10.3-r0 or later.

Affected

introducedfixedlast affected
02.10.3-r0-

Fixed versions

2.10.3-r0

Sources

published · modified · JSON