stylesmuggler-adobe-patches-mageos

disrex/stylesmuggler-adobe-patches-mageos composer require による Mage-OS ストア向け Adobe公式APSB26-146修正 （CVE-2026-75650、内部参照 VULN-39341）の配信。cweagans/composer-patches を通じて適用されます。 これは disrex/stylesmuggler-adobe-patches （Magento Open Source 向け）の Mage-OS 版です。Mage-OS でのみ使用してください。 修正を含む Mage-OS リリースを優先してください。...

Command injection via malicious Perforce repository definition

Impact The Perforce::generateP4Command method constructed shell commands by interpolating user-supplied Perforce connection parameters port, user, client without proper escaping. An attacker controlling a repository configuration in a malicious composer.json declaring a Perforce VCS repository...

SUSE CVE-2021-29472

Composer is a dependency manager for PHP. URLs for Mercurial repositories in the root composer.json and package source download URLs are not sanitized correctly. Specifically crafted URL values allow code to be executed in the HgDriver if hg/Mercurial is installed on the system. The impact to...