stylesmuggler-adobe-patches-mageos

disrex/stylesmuggler-adobe-patches-mageos composer require delivery of Adobe's official APSB26-146 fix CVE-2026-75650, internal reference VULN-39341 for Mage-OS stores, applied through cweagans/composer-patches. This is the Mage-OS companion to disrex/stylesmuggler-adobe-patches that one is for...

Command injection via malicious Perforce repository definition

Impact The Perforce::generateP4Command method constructed shell commands by interpolating user-supplied Perforce connection parameters port, user, client without proper escaping. An attacker controlling a repository configuration in a malicious composer.json declaring a Perforce VCS repository...

SUSE CVE-2021-29472

Composer is a dependency manager for PHP. URLs for Mercurial repositories in the root composer.json and package source download URLs are not sanitized correctly. Specifically crafted URL values allow code to be executed in the HgDriver if hg/Mercurial is installed on the system. The impact to...