php-composer2 (SUSE:Linux Enterprise Module for Web and Scripting 15 SP4) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Web and Scripting 15 SP4 package php-composer2, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2022-24828 — CVSS 8.3 (high): Composer is a dependency manager for the PHP programming language. Integrators using Composer code to call `VcsDriver::getFileContent` can…
• CVE-2023-43655 — CVSS 6.4 (medium): Composer is a dependency manager for PHP. Users publishing a composer.phar to a public web-accessible server where the composer.phar can be…