Known vulnerabilities in composer

Vendor: OpenAnolis
Software: composer
Software CPE: cpe:2.3:o:openanolis:composer:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting composer composer is affected by 7 known vulnerabilities: 3 high, 3 medium, 1 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU136613 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-59946		 CWE-22 Medium
No
No
 2.10.2-1 01.07.2026 SB2026070158
SB20260721146
SB2026092141
and 2 more
#VU136612 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-59948		 CWE-22 Medium
No
No
 2.10.2-1 01.07.2026 SB2026070158
SB20260721146
SB2026092141
and 2 more
#VU136611 - Information Exposure Through Log Files
CVE-2026-59947		 CWE-532 Low
No
No
 2.10.2-1 01.07.2026 SB2026070158
SB20260721146
SB2026092141
and 3 more
#VU125895 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-40176		 CWE-78 High
No
No
 2.9.7-1 14.04.2026 SB2026041445
SB2026041481
SB2026041482
and 8 more
#VU125894 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-40261		 CWE-78 High
No
No
 2.9.7-1 14.04.2026 SB2026041445
SB2026041481
SB2026041482
and 8 more
#VU125893 - Improper Neutralization of Escape, Meta, or Control Sequences
CVE-2025-67746		 CWE-150 Medium
No
No
 2.7.1-5 14.04.2026 SB2026041444
SB2026041449
SB2026041450
and 2 more
#VU91684 - Command injection
CVE-2024-35241		 CWE-77 High
No
No
 2.7.1-3 11.06.2024 SB2024061107
SB2024061108
SB2024061109
and 7 more