Bundesamt für Sicherheit in der Informationstechnik Fedora · Composer: Mehrere Schwachstellen
Affects Bundesamt für Sicherheit in der Informationstechnik FedoraSource GCVE Database
0
Severity
UnratedRated by Threat Radar
- Patch
- Available – fixed in 2.11.2
Data as of 12 Nov 2026, 12:06 UTC
What to do
Upgrade Bundesamt für Sicherheit in der Informationstechnik Fedora to 2.11.2.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Bundesamt für Sicherheit in der Informationstechnik Fedora | Affected
| Fixed in
|
AI-suggested
Upgrade Composer to version 2.11.2 or later to address the identified vulnerabilities. No additional mitigation steps are specified.
Description
Multiple vulnerabilities have been identified in Composer, an open-source dependency manager for PHP projects. These issues affect versions prior to 2.11.2. The vulnerabilities have been addressed in version 2.11.2.
References
- wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-4444.json (opens in a new tab)
- wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4444 (opens in a new tab)
- github.com/composer/composer/security/advisories/GHSA-jhfp-4ppm-crmm (opens in a new tab)
- github.com/composer/composer/security/advisories/GHSA-w6hj-6587-3jh5 (opens in a new tab)
- github.com/composer/composer/security/advisories/GHSA-x82q-x274-r6pq (opens in a new tab)
- bodhi.fedoraproject.org/updates/FEDORA-2026-36c0aba2e1 (opens in a new tab)
- bodhi.fedoraproject.org/updates/FEDORA-2026-479af584c3 (opens in a new tab)
- bodhi.fedoraproject.org/updates/FEDORA-2026-ab2aaea969 (opens in a new tab)
- bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-308fca30bf (opens in a new tab)
- bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-8d9e3a7486 (opens in a new tab)
- bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-d02b793e7f (opens in a new tab)
Community reviews
Loading reviews…