getcomposer kayıtları
getcomposer üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 5
- Düzeltme kaydı olan
- %91,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-20 Improper Input Validation3
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')3
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2
- CWE-345 Insufficient Verification of Data Authenticity1
- CWE-276 Incorrect Default Permissions1
- CWE-829 Inclusion of Functionality from Untrusted Control Sphere1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2021-41116İstismar yok | Command injection in composer on Windowsgetcomposer · composer · CWE-77 | Kritik9,8 | — | %2,9 | 5 Eki 2021 |
36İzleyin | CVE-2021-29472İstismar yok | Missing argument delimiter can lead to code execution via VCS repository URLs or source download URLs on systems with Mercurial in composergetcomposer · composer · CWE-88 | Yüksek8,8 | — | %4,6 | 27 Nis 2021 |
36İzleyin | CVE-2024-35242Kavram kanıtı | Composer vulnerable to command injection via malicious git/hg branch namescomposer · composer · CWE-77 | Yüksek8,8 | — | %3,3 | 10 Haz 2024 |
36İzleyin | CVE-2026-40261Kavram kanıtı | Composer has Command Injection via Malicious Perforce Referencegetcomposer · composer · CWE-20 | Yüksek8,8 | — | %1,9 | 15 Nis 2026 |
36İzleyin | CVE-2022-24828İstismar yok | Missing input validation can lead to command execution in composergetcomposer · composer · CWE-20 | Yüksek8,8 | — | %1,9 | 13 Nis 2022 |
35İzleyin | CVE-2023-43655İstismar yok | Remote Code Execution via web-accessible composer.phargetcomposer · composer · CWE-74 | Yüksek8,8 | — | %1,4 | 29 Eyl 2023 |
35İzleyin | CVE-2024-35241İstismar yok | Composer vulnerable to command injection via malicious git branch namecomposer · composer · CWE-77 | Yüksek8,8 | — | %1,1 | 10 Haz 2024 |
35İzleyin | CVE-2015-8371İstismar yok | Composer before 2016-02-10 allows cache poisoning from other projects built on the same host.getcomposer · composer · CWE-345 | Yüksek8,8 | — | %0,7 | 21 Eyl 2023 |
32İzleyin | CVE-2020-15145İstismar yok | Local privilege elevation in Composer-Setup for Windowsgetcomposer · composer-setup · CWE-276 | Yüksek8,2 | — | %0,4 | 14 Ağu 2020 |
31İzleyin | CVE-2026-40176Kavram kanıtı | Composer is vulnerable to Command Injection via Malicious Perforce Repositorygetcomposer · composer · CWE-20 | Yüksek7,8 | — | %1,0 | 15 Nis 2026 |
31İzleyin | CVE-2024-24821İstismar yok | Code execution and possible privilege escalation via compromised InstalledVersions.php or installed.php in Composergetcomposer · composer · CWE-829 | Yüksek7,8 | — | %0,3 | 8 Şub 2024 |
5İzleyin | CVE-2025-67746İstismar yok | Composer vulnerable to ANSI sequence injectiongetcomposer · composer · CWE-74 | Düşük1,3 | — | %0,5 | 30 Ara 2025 |
- CVE-2021-4111640Planlayın
Command injection in composer on Windows
KritikCVSS 9,8İstismar yokEPSS %3getcomposer · composer5 Eki 2021
- CVE-2021-2947236İzleyin
Missing argument delimiter can lead to code execution via VCS repository URLs or source download URLs on systems with Mercurial in composer
YüksekCVSS 8,8İstismar yokEPSS %5getcomposer · composer27 Nis 2021
- CVE-2024-3524236İzleyin
Composer vulnerable to command injection via malicious git/hg branch names
YüksekCVSS 8,8Kavram kanıtıEPSS %3composer · composer10 Haz 2024
- CVE-2026-4026136İzleyin
Composer has Command Injection via Malicious Perforce Reference
YüksekCVSS 8,8Kavram kanıtıEPSS %2getcomposer · composer15 Nis 2026
- CVE-2022-2482836İzleyin
Missing input validation can lead to command execution in composer
YüksekCVSS 8,8İstismar yokEPSS %2getcomposer · composer13 Nis 2022
- CVE-2023-4365535İzleyin
Remote Code Execution via web-accessible composer.phar
YüksekCVSS 8,8İstismar yokEPSS %1getcomposer · composer29 Eyl 2023
- CVE-2024-3524135İzleyin
Composer vulnerable to command injection via malicious git branch name
YüksekCVSS 8,8İstismar yokEPSS %1composer · composer10 Haz 2024
- CVE-2015-837135İzleyin
Composer before 2016-02-10 allows cache poisoning from other projects built on the same host.
YüksekCVSS 8,8İstismar yokEPSS %1getcomposer · composer21 Eyl 2023
- CVE-2020-1514532İzleyin
Local privilege elevation in Composer-Setup for Windows
YüksekCVSS 8,2İstismar yokEPSS %0getcomposer · composer-setup14 Ağu 2020
- CVE-2026-4017631İzleyin
Composer is vulnerable to Command Injection via Malicious Perforce Repository
YüksekCVSS 7,8Kavram kanıtıEPSS %1getcomposer · composer15 Nis 2026
- CVE-2024-2482131İzleyin
Code execution and possible privilege escalation via compromised InstalledVersions.php or installed.php in Composer
YüksekCVSS 7,8İstismar yokEPSS %0getcomposer · composer8 Şub 2024
- CVE-2025-677465İzleyin
Composer vulnerable to ANSI sequence injection
DüşükCVSS 1,3İstismar yokEPSS %0getcomposer · composer30 Ara 2025