The vulnerability of the getUnpushedChanges() function in the dependency manager for PHP Composer allows a hacker to execute arbitrary commands.

The vulnerability of the getUnpushedChanges function in the PHP Composer dependency manager is related to the improper elimination of special elements. Exploiting this vulnerability could allow an attacker to execute arbitrary commands using the status, reinstall, and remove commands...

Code Execution

composer/composer is vulnerable to Code Execution. The vulnerability is due to improper branch name sanitization within the status, reinstall, and remove commands when handling packages installed from source via git, which allows an attacker to execute arbitrary code...

composer security vulnerability

composer is a software application. It provides a declaration to manage and install dependencies of PHP projects. A security vulnerability exists in composer versions prior to 2.2.24 and 2.7.7, which stems from the ability to execute code using the status, reinstall, and remove commands, as well ...