php-composer2 (SUSE:Manager Server 4.3) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Manager Server 4.3 package php-composer2, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2024-24821 — CVSS 8.8 (high): Composer is a dependency Manager for the PHP language. In affected versions several files within the local working directory are included…
• CVE-2024-35241 — CVSS 8.8 (high): Composer is a dependency manager for PHP. On the 2.x branch prior to versions 2.2.24 and 2.7.7, the `status`, `reinstall` and `remove`…
• CVE-2024-35242 — CVSS 8.8 (high): Composer is a dependency manager for PHP. On the 2.x branch prior to versions 2.2.24 and 2.7.7, the `composer install` command running…