Two high-severity security vulnerabilities have been
disclosed in Composer, a package manager for PHP, that,
if successfully exploited, could result in arbitrary command
execution. The vulnerabilities have been described as
command injection flaws affecting the Perforce VCS (version control
software) driver. Details of the two flaws are below -
CVE-2026-40176 (CVSS
Read more https://thehackernews.com/2026/04/new-php-composer-flaws-enable-arbitrary.html
