Lucene search
GoogleOSV:CVE-2021-41116HistoryOct 05, 2021 - 6:15 p.m.
CVE-2021-41116
2021-10-0518:15:08
Google
osv.dev
4
Composer is an open source dependency manager for the PHP language. In affected versions windows users running Composer to install untrusted dependencies are subject to command injection and should upgrade their composer version. Other OSs and WSL are not affected. The issue has been resolved in composer versions 1.10.23 and 2.1.9. There are no workarounds for this issue.
Related
prion
prion
Command injection
2021-10-05 18:15:00
debiancve
debiancve
CVE-2021-41116
2021-10-05 18:15:08
ubuntucve
ubuntucve
CVE-2021-41116
2021-10-05 00:00:00
alpinelinux
alpinelinux
CVE-2021-41116
2021-10-05 18:15:08
veracode
veracode
Supply Chain Attack
2021-10-05 20:05:41
osv
osv
BIT-composer-2021-41116
2024-03-06 10:51:26
nvd
nvd
CVE-2021-41116
2021-10-05 18:15:08
github
github
friendsofphp
friendsofphp
cvelist
cvelist
CVE-2021-41116 Command injection in composer on Windows
2021-10-05 17:40:10
cve
cve
CVE-2021-41116
2021-10-05 18:15:08
nessus
nessus
openSUSE 15 Security Update : php-composer (openSUSE-SU-2022:0132-1)
2022-05-11 00:00:00
Tenable SecurityCenter < 5.21.0 Multiple Vulnerabilities (TNS-2022-09)
2022-05-10 00:00:00
suse
suse
Security update for php-composer (important)
2022-05-10 00:00:00