Gentoo Linux — dev-php/composer — multiple vulnerabilities (2 CVEs) — patch and remediation guide
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202508-06 Related CVEs: CVE-2022-24828 CVE-2023-43655 Upstream summary: Integrators using Composer code to call `VcsDriver::getFileContent` can have a code injection vulnerability if the user can control the `$file` or `$identifier` argument. This leads […]