php-composer2

Direct Vulnerabilities

Known vulnerabilities in the php-composer2 package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
M Information Exposure Through Log Files	<2.2.30-150400.3.24.1
H Directory Traversal	<2.2.30-150400.3.24.1
M Directory Traversal	<2.2.30-150400.3.24.1
H Directory Traversal	<2.2.30-150400.3.21.1
H OS Command Injection	<2.2.30-150400.3.21.1
M Directory Traversal	<2.2.30-150400.3.21.1
M Directory Traversal	<2.2.30-150400.3.21.1
M Information Exposure Through Log Files	<2.2.30-150400.3.21.1
M Information Exposure	<2.2.30-150400.3.21.1
H CVE-2024-35242	<2.2.27-150400.3.18.1
H Improper Input Validation	<2.2.27-150400.3.18.1
L Arbitrary Code Injection	<2.2.27-150400.3.18.1
H CVE-2024-35241	<2.2.27-150400.3.18.1
M Arbitrary Code Injection	<2.2.27-150400.3.18.1
H Inclusion of Functionality from Untrusted Control Sphere	<2.2.27-150400.3.18.1
H Arbitrary Argument Injection	<2.2.27-150400.3.18.1
H Improper Input Validation	<2.2.27-150400.3.18.1
H CVE-2024-35241	<2.2.3-150400.3.12.1
H CVE-2024-35242	<2.2.3-150400.3.12.1
H Inclusion of Functionality from Untrusted Control Sphere	<2.2.3-150400.3.9.1
M Arbitrary Code Injection	<2.2.3-150400.3.6.1