GHSA-59PP-R3RG-353G Composer is vulnerable to ANSI sequence injection

Impact Attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and potentially leading to confusion or DoS of the terminal application. There is no proven exploit...

CVE-2025-67746

Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and...

CVE-2025-67746

Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and...

CVE-2025-67746 Composer vulnerable to ANSI sequence injection

Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and...

EUVD-2025-205815

Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and...

CVE-2025-67746 Composer vulnerable to ANSI sequence injection

Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and...

CVE-2025-67746

Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and...

CVE-2025-67746 Composer vulnerable to ANSI sequence injection

Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and...

CVE-2025-67746

Composer 2.x is vulnerable to ANSI sequence injection in terminal output when downloading from remote sources. Affected: 2.2.x before 2.2.26 and 2.9.x before 2.9.3. Root cause: remote sources can inject ANSI control characters into command output, potentially causing mangled output and terminal D...

CVE-2025-69025

creationtimestamp| type| source ---|---|--- 2025-12-30 12:23:40+00:00| seen| https://gist.github.com/Darkcrai86/daf9b003d64856938bf5305af949749a 2025-12-30 13:33:48+00:00| seen| https://gist.github.com/Darkcrai86/51b434e4cdffd09b6493ddb74d99cb19...

CVE-2025-69092

creationtimestamp| type| source ---|---|--- 2025-12-30 12:18:26+00:00| seen| https://gist.github.com/Darkcrai86/6cd20cf5bf45ae912d0cf97f63262313 2025-12-30 13:30:49+00:00| seen| https://gist.github.com/Darkcrai86/5b281448f59e3bbee4200f8c778ec916 2026-01-08 22:13:35+00:00|...

CVE-2025-15359

creationtimestamp| type| source ---|---|--- 2025-12-30 10:28:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb75dgs3b42x 2025-12-30 11:00:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mb7744vb4q2p 2026-01-05 17:01:58+00:00| published-proof-of-concept|...

CVE-2025-61037

creationtimestamp| type| source ---|---|--- 2025-12-30 08:05:47+00:00| seen| https://gist.github.com/GunP4ng/42b19ee99e94c315173b74a9fb26c2b9 2025-12-30 08:33:01+00:00| seen| https://gist.github.com/jc0818/233462416579661e4e2795f96457a6bf 2026-01-02 21:53:17+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2025-67746

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads...

CVE-2025-13592

creationtimestamp| type| source ---|---|--- 2025-12-29 20:51:03+00:00| seen| https://gist.github.com/Darkcrai86/25b83b6c2aa93748db91a065f20b9069 2025-12-29 21:00:41+00:00| seen| https://gist.github.com/Darkcrai86/fca5560cadd7f8c78d287842d04537f8...

CVE-2025-55061

creationtimestamp| type| source ---|---|--- 2025-12-29 18:29:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb5hq62ur32y 2025-12-29 19:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mb5jhstx6z2g...

CVE-2025-15191

creationtimestamp| type| source ---|---|--- 2025-12-29 14:32:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb52ixhcjl2c 2025-12-29 15:11:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115803495870167323...

CVE-2025-15189

creationtimestamp| type| source ---|---|--- 2025-12-29 13:22:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mb4wkg5pdg2u 2025-12-29 13:37:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb4xgjil2h2y 2025-12-29 15:11:56+00:00| seen|...

CVE-2025-15227

creationtimestamp| type| source ---|---|--- 2025-12-29 08:15:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb4fgcf6wr2u 2025-12-29 08:38:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mb4gpfkbvg2b...

CVE-2025-60458

creationtimestamp| type| source ---|---|--- 2025-12-29 07:00:12+00:00| published-proof-of-concept| Telegram/0bS8XmiBZ6DuNmG6E0qg4EB43hWsPVptPwfOUv0NgieIr48 2025-12-29 09:00:05+00:00| published-proof-of-concept| Telegram/Rk3Pm0xazzAxLfp-nWuprn3TjhkjdHjxxzptFTkeMZjK45M...