QID 504628

QID 504628: Alpine Linux Security Update for composer

Alpine Linux has released a security update for composer to fix the vulnerabilities.

Affected versions:
Alpine Linux 3.17
Alpine Linux 3.18
Alpine Linux 3.19


Affected Package versions prior to 2.1.9-r0.

Successful exploitation of this vulnerability could lead to a security breach or could affect integrity, availability, and confidentiality.

  • CVSS V3 rated as Critical - 9.8 severity.
  • CVSS V2 rated as High - 7.5 severity.
  • Solution
    Refer to Alpine Linux advisory composer for updates and patch information.
    Vendor References

    CVEs related to QID 504628

    Software Advisories
    Advisory ID Software Component Link
    composer-2.1.9-r0 Alpine Linux URL Logo security.alpinelinux.org/srcpkg/composer