Critical PHP Composer security vulnerabilities patched

Two high-severity vulnerabilities discovered in PHP Composer allowing arbitrary command execution have been patched.

Published 14sem24 sources✓ ConfirmedImportant

Lire en français

≈ 18sSpeed

The fact

These flaws potentially affect thousands of software development projects using this popular dependency manager.

Developers are urged to update immediately to prevent malicious exploitation.

24 sources — click a link to read an article on the topic:

RFI

Explore this topic

PHP Composer #PHP #sécurité #vulnérabilité #correctif #développement

What if you saw the whole news differently?Factae cross-checks hundreds of sources worldwide to keep only the fact, no opinion. Explore the front page.

Story timeline

Apr 11Satellite imagery provider restricts Iran coverage following US pressure

Apr 13Pentesting: Claude Mythos automates cybersecurity testing

Apr 13FBI warns: routers vulnerable to coordinated Russian hackers

Apr 13Phishing 3.0: hijackers exploit your real reservation data

Apr 13OpenAI founder Sam Altman's home targeted in two separate attacks

Apr 13OpenAI revokes certificate following supply chain vulnerability

Apr 13North Korea targets Facebook to spread banking malware

Apr 13Basic-Fit data breach: one million members affected

Apr 13Basic-Fit data breach: one million members affected, personal data exposed

Apr 13Rockstar Games hacked again, downplays impact after second breach

Apr 13Hijacked crosswalk reveals overlooked vulnerability in urban infrastructure systems

Apr 13French government secures administration: authentication, DNS and messaging

Apr 13One million Basic-Fit customers exposed in cyberattack

Apr 13Weekly security recap: fiber optic spying, Windows rootkit, AI hunting

Apr 13FBI and Indonesian Police Dismantle W3LL Phishing Network Behind $20M Fraud

Apr 13French cyber warriors engage in Locked Shields 2026 exercise

Apr 13French cyber defense participates in European allied exercise

Apr 13French Authorities Warn of Rising Cybersexploitation on TikTok

Apr 13Crypto exchange Kraken targeted in extortion attempt but says there was no breach

Apr 13Insurance sector prioritizes cyber risk and geopolitical impact

Apr 13JanelaRAT Malware Targets Latin American Banks with 14,739 Attacks in Brazil

Apr 13Claude Mythos: Anthropic Confronts Major Cybersecurity Challenges

Apr 13Kraken Refuses to Negotiate After Extortion Attempt Over Stolen Data

Apr 13Tech support scams deepen as fraudsters hide behind additional fraud

Apr 14Man faces federal charges over attack on OpenAI CEO Sam Altman's home

Apr 14OpenAI CEO Altman attacked: 20-year-old Texan charged with attempted murder

Apr 14Massive data breach exposes 3.5 million French students

Apr 14Fortinet and Microsoft Critical Flaws Added to US Cybersecurity Watchlist

Apr 14ShowDoc: Critical Flaw Actively Exploited on Unpatched Servers

Apr 14Kraken hit by extortion attempts and customer data theft

Apr 14Malware Campaign: 108 Chrome Extensions Steal User Data

Apr 14Hyperbridge protocol hack: one billion DOT tokens created by attacker

Apr 14Massive crypto losses: $464 million stolen in first quarter

Apr 14Analysis of 216 Million Security Findings: Critical Risks Up 400%

Apr 14Ten Taiwanese accused of espionage for Beijing

Apr 14Mirax Android RAT Converts Devices Into SOCKS5 Proxies, Infects 220,000 Users

Apr 14Mother and son freed 20 hours after cryptocurrency-linked abduction

Apr 14Fake Ledger App on Apple App Store Steals $9.5 Million in Cryptocurrency

Apr 14Has Google's AI Watermarking System Been Reverse-Engineered?

Apr 14Google Enhances Pixel Security with Rust-Based DNS Parser

Apr 14Fake Ledger Live app steals $9.5 million from victims on Apple App Store

Apr 14Malicious Ad Fraud Campaign Exploits Google Discover Platform

Apr 14Cyberattack on Education Ministry: student data compromised

Apr 14Cyberattack on Education Ministry, student data compromised

Apr 14DeFi platform warns users after security breach

Apr 14Critical PHP Composer security vulnerabilities patchedthis article

Follow topic →

Auto-synthesis from 24 media sources · identified on April 14, 2026

← Back to home

The fact

Story timeline

Read more

Composer: arbitrary code execution via Perforce vulnerability discovered

Vulnérabilité de type buffer overflow dans nasm signalée le 07/05/2026

Security updates accelerate across Linux and PHP ecosystems

Four critical vulnerabilities found in popular libraries

Fuite mémoire dans Helm via JSON Schema pouvant causer un déni de service

Multiple security vulnerabilities discovered in major software