Linux
composer security updates
Patch Radar has 43 security fixes for composer, closing 16 CVEs. The newest is DEBIAN-CVE-2026-84361 (2.10.3-1), released September 3, 2026.
Latest version
n/a
Release date not known
Security fixes
43
On record in Patch Radar
CVEs
16
Closed by those fixes
Exploited
0
Vendor report or CISA KEV
Security fixes, newest first
| Priority | Fix | Release | Fixed in | CVEs | Exploited | Released |
|---|---|---|---|---|---|---|
| Routine | DEBIAN-CVE-2026-84361 | Debian 14 | 2.10.3-1 | 1 | Sep 3, 2026 | |
| Routine | DEBIAN-CVE-2026-59944 | Debian 14 | 2.10.3-1 | 1 | Sep 2, 2026 | |
| High | DEBIAN-CVE-2026-59948 | Debian 14 | 2.10.2-1 | 1 | Jul 9, 2026 | |
| Routine | DEBIAN-CVE-2026-59946 | Debian 14 | 2.10.2-1 | 1 | Jul 9, 2026 | |
| Routine | DEBIAN-CVE-2026-59947 | Debian 14 | 2.10.2-1 | 1 | Jul 9, 2026 | |
| High | DEBIAN-CVE-2026-45793 | Debian 12.15 (bookworm) | 2.5.5-1+deb12u5 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2026-45793 | Debian 13.5 (trixie) | 2.8.8-1+deb13u3 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2026-45793 | Debian 14 | 2.10.0-1 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2026-40261 | Debian 12.15 (bookworm) | 2.5.5-1+deb12u4 | 1 | Apr 15, 2026 | |
| High | DEBIAN-CVE-2026-40261 | Debian 13.5 (trixie) | 2.8.8-1+deb13u2 | 1 | Apr 15, 2026 | |
| High | DEBIAN-CVE-2026-40261 | Debian 14 | 2.9.7-1 | 1 | Apr 15, 2026 | |
| High | DEBIAN-CVE-2026-40176 | Debian 12.15 (bookworm) | 2.5.5-1+deb12u4 | 1 | Apr 15, 2026 | |
| High | DEBIAN-CVE-2026-40176 | Debian 13.5 (trixie) | 2.8.8-1+deb13u2 | 1 | Apr 15, 2026 | |
| High | DEBIAN-CVE-2026-40176 | Debian 14 | 2.9.7-1 | 1 | Apr 15, 2026 | |
| Routine | DEBIAN-CVE-2025-67746 | Debian 12.15 (bookworm) | 2.5.5-1+deb12u3 | 1 | Dec 30, 2025 | |
| Routine | DEBIAN-CVE-2025-67746 | Debian 13.5 (trixie) | 2.8.8-1+deb13u1 | 1 | Dec 30, 2025 | |
| Routine | DEBIAN-CVE-2025-67746 | Debian 14 | 2.9.3-1 | 1 | Dec 30, 2025 | |
| High | DSA-5715-1 | Debian 12.15 (bookworm) | 2.5.5-1+deb12u2 | 1 | Jun 18, 2024 | |
| High | DSA-5715-1 | Debian 11.6 (bullseye) | 2.0.9-2+deb11u3 | 1 | Jun 18, 2024 | |
| High | DEBIAN-CVE-2024-35242 | Debian 12.15 (bookworm) | 2.5.5-1+deb12u2 | 1 | Jun 10, 2024 | |
| High | DEBIAN-CVE-2024-35242 | Debian 13.5 (trixie) | 2.7.7-1 | 1 | Jun 10, 2024 | |
| High | DEBIAN-CVE-2024-35242 | Debian 14 | 2.7.7-1 | 1 | Jun 10, 2024 | |
| High | DEBIAN-CVE-2024-35241 | Debian 13.5 (trixie) | 2.7.7-1 | 1 | Jun 10, 2024 | |
| High | DEBIAN-CVE-2024-35241 | Debian 14 | 2.7.7-1 | 1 | Jun 10, 2024 | |
| High | composer 2.2.6-2ubuntu4+esm1 | Ubuntu 22.04.1 LTS (jammy) | 2.2.6-2ubuntu4+esm1 | 5 | Jun 10, 2024 | |
| High | composer 1.10.1-1ubuntu0.1~esm2 | Ubuntu 20.04 LTS (focal) | 1.10.1-1ubuntu0.1~esm2 | 4 | Jun 10, 2024 | |
| High | composer 1.6.3-1ubuntu0.1~esm2 | Ubuntu 18.04.6 LTS (bionic) | 1.6.3-1ubuntu0.1~esm2 | 4 | Jun 10, 2024 | |
| High | composer 2.7.1-2ubuntu0.1~esm1 | Ubuntu 24.04.5 LTS (noble) | 2.7.1-2ubuntu0.1~esm1 | 2 | Jun 10, 2024 | |
| High | DSA-5632-1 | Debian 11.6 (bullseye) | 2.0.9-2+deb11u2 | 1 | Feb 26, 2024 | |
| High | DSA-5632-1 | Debian 12.15 (bookworm) | 2.5.5-1+deb12u1 | 1 | Feb 26, 2024 | |
| High | DEBIAN-CVE-2024-24821 | Debian 13.5 (trixie) | 2.7.1-1 | 1 | Feb 9, 2024 | |
| High | DEBIAN-CVE-2024-24821 | Debian 14 | 2.7.1-1 | 1 | Feb 9, 2024 | |
| High | DEBIAN-CVE-2023-43655 | Debian 14 | 2.6.4-1 | 1 | Sep 29, 2023 | |
| High | DEBIAN-CVE-2023-43655 | Debian 12.15 (bookworm) | 2.5.5-1+deb12u4 | 1 | Sep 29, 2023 | |
| High | DEBIAN-CVE-2023-43655 | Debian 13.5 (trixie) | 2.6.4-1 | 1 | Sep 29, 2023 | |
| High | DEBIAN-CVE-2015-8371 | Debian 12.15 (bookworm) | 1.0.0~alpha11-3 | 1 | Sep 21, 2023 | |
| High | DEBIAN-CVE-2015-8371 | Debian 13.5 (trixie) | 1.0.0~alpha11-3 | 1 | Sep 21, 2023 | |
| High | DEBIAN-CVE-2015-8371 | Debian 14 | 1.0.0~alpha11-3 | 1 | Sep 21, 2023 | |
| High | DEBIAN-CVE-2022-24828 | Debian 12.15 (bookworm) | 2.2.12-1 | 1 | Apr 13, 2022 | |
| High | DEBIAN-CVE-2022-24828 | Debian 13.5 (trixie) | 2.2.12-1 | 1 | Apr 13, 2022 | |
| High | DEBIAN-CVE-2022-24828 | Debian 14 | 2.2.12-1 | 1 | Apr 13, 2022 | |
| Routine | composer 1.10.1-1ubuntu0.1~esm1 | Ubuntu 20.04 LTS (focal) | 1.10.1-1ubuntu0.1~esm1 | 1 | Apr 27, 2021 | |
| Routine | composer 1.6.3-1ubuntu0.1~esm1 | Ubuntu 18.04.6 LTS (bionic) | 1.6.3-1ubuntu0.1~esm1 | 1 | Apr 27, 2021 |