Lucene search
Alpine Linux Development TeamALPINE:CVE-2021-41116HistoryOct 05, 2021 - 6:15 p.m.
CVE-2021-41116
2021-10-0518:15:00
Alpine Linux Development Team
security.alpinelinux.org
24
0.001 Low
EPSS
Percentile
49.4%
Composer is an open source dependency manager for the PHP language. In affected versions windows users running Composer to install untrusted dependencies are subject to command injection and should upgrade their composer version. Other OSs and WSL are not affected. The issue has been resolved in composer versions 1.10.23 and 2.1.9. There are no workarounds for this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | composer | < 2.1.9-r0 | UNKNOWN |
| Alpine | 3.14-community | noarch | composer | < 2.1.9-r0 | UNKNOWN |
| Alpine | 3.15-community | noarch | composer | < 2.1.9-r0 | UNKNOWN |
| Alpine | 3.16-community | noarch | composer | < 2.1.9-r0 | UNKNOWN |
| Alpine | 3.17-community | noarch | composer | < 2.1.9-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | composer | < 2.1.9-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | composer | < 2.1.9-r0 | UNKNOWN |
Related
prion
prion
Command injection
2021-10-05 18:15:00
debiancve
debiancve
CVE-2021-41116
2021-10-05 18:15:00
osv
osv
BIT-composer-2021-41116
2024-03-06 10:51:26
CVE-2021-41116
2021-10-05 18:15:08
ubuntucve
ubuntucve
CVE-2021-41116
2021-10-05 00:00:00
veracode
veracode
Supply Chain Attack
2021-10-05 20:05:41
github
github
friendsofphp
friendsofphp
cve
cve
CVE-2021-41116
2021-10-05 18:15:00
cvelist
cvelist
CVE-2021-41116 Command injection in composer on Windows
2021-10-05 17:40:10
nessus
nessus
openSUSE 15 Security Update : php-composer (openSUSE-SU-2022:0132-1)
2022-05-11 00:00:00
Tenable SecurityCenter < 5.21.0 Multiple Vulnerabilities (TNS-2022-09)
2022-05-10 00:00:00
suse
suse
Security update for php-composer (important)
2022-05-10 00:00:00