With the recent scandal over the 'node-ipc' package, is Composer also vulnerable like this? Is there any security measure in the Composer to prevent this type of attack?

1. GHSA-97m3-w2cp-4xx6

   1 13 - -

   Source: CVE-2022-23812

2. InfluxDB

   www.influxdata.com featured

   InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.

   

3. Symfony

   2 176 30,395 10.0 PHP

   The Symfony PHP framework

   

   Symfony sort of did this recently to anyone who was running php 8 + memcached: https://github.com/symfony/symfony/issues/45601

4. SecurityAdvisories

   3 6 2,799 9.5

   :closed_lock_with_key: Security advisories as a simple composer exclusion list, updated daily

   

Suggest a related project