php-composer2

Direct Vulnerabilities

Known vulnerabilities in the php-composer2 package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
M Information Exposure Through Log Files	<2.2.30-150400.3.24.1
H Directory Traversal	<2.2.30-150400.3.24.1
M Directory Traversal	<2.2.30-150400.3.24.1
M Directory Traversal	<2.2.30-150400.3.21.1
M Information Exposure Through Log Files	<2.2.30-150400.3.21.1
M Information Exposure	<2.2.30-150400.3.21.1
H OS Command Injection	<2.2.30-150400.3.21.1
H Directory Traversal	<2.2.30-150400.3.21.1
M Directory Traversal	<2.2.30-150400.3.21.1
H CVE-2024-35241	<2.2.27-150400.3.18.1
H CVE-2024-35242	<2.2.27-150400.3.18.1
H Improper Input Validation	<2.2.27-150400.3.18.1
H Inclusion of Functionality from Untrusted Control Sphere	<2.2.27-150400.3.18.1
M Arbitrary Code Injection	<2.2.27-150400.3.18.1
L Arbitrary Code Injection	<2.2.27-150400.3.18.1
H Improper Input Validation	<2.2.27-150400.3.18.1
H Arbitrary Argument Injection	<2.2.27-150400.3.18.1
H CVE-2024-35241	<2.2.3-150400.3.12.1
H CVE-2024-35242	<2.2.3-150400.3.12.1
H Inclusion of Functionality from Untrusted Control Sphere	<2.2.3-150400.3.9.1
M Arbitrary Code Injection	<2.2.3-150400.3.6.1
H Arbitrary Argument Injection	<2.2.3-150400.3.3.1