New PHP Composer Flaws Enable Arbitrary Command Execution — Patches Released

Certains articles de veille peuvent faire l'objet de traduction automatique.

Two high-severity security vulnerabilities have been disclosed in Composer, a package manager for PHP, that, if successfully exploited, could result in arbitrary command execution.
The vulnerabilities have been described as command injection flaws affecting the Perforce VCS (version control software) driver. Details of the two flaws are below –

CVE-2026-40176 (CVSS

Source : https://thehackernews.com/2026/04/new-php-composer-flaws-enable-arbitrary.html