6 matches found
DEBIAN-CVE-2026-59944
Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and from 2.3.0 until 2.10.3, a malicious or compromised dependency can bypass the earlier CVE-2026-59946 binary-path hardening because Composer validates literal parent-directory segments only during dependency resolutio...
Medium: composer
Issue Overview: Package bin path can escape the package directory, bypassing the GHSA-gjfg-22fp-rrxx fix. A malicious or compromised Composer package could, when installed as a dependency, cause Composer to change the permissions of a file outside that package's own directory and to register a...
CVE-2026-59944
creationtimestamp| type| source ---|---|--- 2026-08-31 08:30:30+00:00| seen| https://bsky.app/profile/newsfacts.bsky.social/post/3mueiipkaee27...
php-composer2-2.10.3-1.1 on GA media (moderate)
php-composer2-2.10.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11633-1 Rating: moderate Cross-References: CVE-2026-59944 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
