[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-45793/composer

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu May 14 11:07:22 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d4ddc7cf by Salvatore Bonaccorso at 2026-05-14T12:06:47+02:00
Track fixed version for CVE-2026-45793/composer

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
 CVE-2026-45793 [Github Actions issued GITHUB_TOKEN disclosure in GitHub Actions logs]
-	- composer <unfixed>
+	- composer 0.9.1+dfsg-1
 	[trixie] - composer <no-dsa> (Minor issue)
 	[bookworm] - composer <no-dsa> (Minor issue)
 	NOTE: https://github.com/composer/composer/security/advisories/GHSA-f9f8-rm49-7jv2



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d4ddc7cf711a701418aacb299c4c652dad56f337

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d4ddc7cf711a701418aacb299c4c652dad56f337
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260514/e2895cdb/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list