Lucene search
GitHub_MCVELIST:CVE-2021-41116HistoryOct 05, 2021 - 5:40 p.m.
CVE-2021-41116 Command injection in composer on Windows
2021-10-0517:40:10
CWE-77
GitHub_M
raw.githubusercontent.com
3
Composer is an open source dependency manager for the PHP language. In affected versions windows users running Composer to install untrusted dependencies are subject to command injection and should upgrade their composer version. Other OSs and WSL are not affected. The issue has been resolved in composer versions 1.10.23 and 2.1.9. There are no workarounds for this issue.
Related
prion
prion
Command injection
2021-10-05 18:15:00
debiancve
debiancve
CVE-2021-41116
2021-10-05 18:15:00
veracode
veracode
Supply Chain Attack
2021-10-05 20:05:41
ubuntucve
ubuntucve
CVE-2021-41116
2021-10-05 00:00:00
alpinelinux
alpinelinux
CVE-2021-41116
2021-10-05 18:15:00
osv
osv
BIT-composer-2021-41116
2024-03-06 10:51:26
CVE-2021-41116
2021-10-05 18:15:08
github
github
cve
cve
CVE-2021-41116
2021-10-05 18:15:00
friendsofphp
friendsofphp
nessus
nessus
openSUSE 15 Security Update : php-composer (openSUSE-SU-2022:0132-1)
2022-05-11 00:00:00
Tenable SecurityCenter < 5.21.0 Multiple Vulnerabilities (TNS-2022-09)
2022-05-10 00:00:00
suse
suse
Security update for php-composer (important)
2022-05-10 00:00:00