EUVD-2026-42360

Composer: Path traversal in package bin field lets dependencies chmod arbitrary host files...