getcomposer
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 10 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 10, 2016 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Composer is vulnerable to Command Injection via Malicious Perforce Repository
Composer has Command Injection via Malicious Perforce Reference
Composer vulnerable to ANSI sequence injection
Code execution and possible privilege escalation via compromised InstalledVersions.php or installed.php in Composer
Remote Code Execution via web-accessible composer.phar
Missing input validation can lead to command execution in composer
Command injection in composer on Windows
Missing argument delimiter can lead to code execution via VCS repository URLs or source download URLs on systems with Mercurial in composer
Local privilege elevation in Composer-Setup for Windows
Monitor getcomposer in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.