CVE-2022-24828

Composer is a dependency manager for the PHP programming language. Integrators using Composer code to call "VcsDriver::getFileContent" can have a code injection vulnerability if the user can control the "$file" or "$identifier" argument. This leads to a vulnerability on packagist.org for example...

CVE-2022-24828: Improper Input Validation

Composer is a dependency manager for the PHP programming language. Integrators using Composer code to call VcsDriver::getFileContent can have a code injection vulnerability if the user can control the $file or $identifier argument. This leads to a vulnerability on packagist.org for example where...