Nixpkgs security tracker

Login with GitHub

⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Untriaged

Permalink CVE-2026-11914

created 4 days, 10 hours ago Activity log

Created suggestion 4 days, 10 hours ago

Composer - Critical - Unsupported - SA-CONTRIB-2026-046

vulnerability in Drupal Composer allows . This issue affects Composer versions: *.*.

References

https://www.drupal.org/sa-contrib-2026-046

Affected products

Composer

==*.*

Matching in nixpkgs

pkgs.subtitlecomposer

Open source text-based subtitle editor

nixos-unstable 0.8.2
- nixpkgs-unstable 0.8.2
- nixos-unstable-small 0.8.2
nixos-26.05 0.8.2
- nixos-26.05-small 0.8.2
- nixpkgs-26.05-darwin 0.8.2

pkgs.phpPackages.composer

Dependency Manager for PHP

nixos-unstable 2.10.1
- nixpkgs-unstable 2.10.2
- nixos-unstable-small 2.10.2
nixos-26.05 2.10.1
- nixos-26.05-small 2.10.1
- nixpkgs-26.05-darwin 2.10.1

pkgs.php82Packages.composer

Dependency Manager for PHP

nixos-unstable 2.10.1
- nixpkgs-unstable 2.10.2
- nixos-unstable-small 2.10.2
nixos-26.05 2.10.1
- nixos-26.05-small 2.10.1
- nixpkgs-26.05-darwin 2.10.1

pkgs.php83Packages.composer

Dependency Manager for PHP

nixos-unstable 2.10.1
- nixpkgs-unstable 2.10.2
- nixos-unstable-small 2.10.2
nixos-26.05 2.10.1
- nixos-26.05-small 2.10.1
- nixpkgs-26.05-darwin 2.10.1

pkgs.php84Packages.composer

Dependency Manager for PHP

nixos-unstable 2.10.1
- nixpkgs-unstable 2.10.2
- nixos-unstable-small 2.10.2
nixos-26.05 2.10.1
- nixos-26.05-small 2.10.1
- nixpkgs-26.05-darwin 2.10.1

pkgs.php85Packages.composer

Dependency Manager for PHP

nixos-unstable 2.10.1
- nixpkgs-unstable 2.10.2
- nixos-unstable-small 2.10.2
nixos-26.05 2.10.1
- nixos-26.05-small 2.10.1
- nixpkgs-26.05-darwin 2.10.1

pkgs.composer-require-checker

CLI tool to check whether a specific composer package uses imported symbols that aren't part of its direct composer dependencies

nixos-unstable 4.24.0
- nixpkgs-unstable 4.24.0
- nixos-unstable-small 4.24.0
nixos-26.05 4.24.0
- nixos-26.05-small 4.24.0
- nixpkgs-26.05-darwin 4.24.0

pkgs.haskellPackages.gogol-composer

Google Cloud Composer SDK

nixos-unstable 1.0.0
- nixpkgs-unstable 1.0.0
- nixos-unstable-small 1.0.0
nixos-26.05 1.0.0
- nixos-26.05-small 1.0.0
- nixpkgs-26.05-darwin 1.0.0

pkgs.phpPackages.cyclonedx-php-composer

Composer plugin that facilitates the creation of a CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects

nixos-unstable 5.2.0
- nixpkgs-unstable 5.2.0
- nixos-unstable-small 5.2.0
nixos-26.05 5.2.0
- nixos-26.05-small 5.2.0
- nixpkgs-26.05-darwin 5.2.0

pkgs.php82Packages.cyclonedx-php-composer

Composer plugin that facilitates the creation of a CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects

nixos-unstable 5.2.0
- nixpkgs-unstable 5.2.0
- nixos-unstable-small 5.2.0
nixos-26.05 5.2.0
- nixos-26.05-small 5.2.0
- nixpkgs-26.05-darwin 5.2.0

pkgs.php83Packages.cyclonedx-php-composer

Composer plugin that facilitates the creation of a CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects

nixos-unstable 5.2.0
- nixpkgs-unstable 5.2.0
- nixos-unstable-small 5.2.0
nixos-26.05 5.2.0
- nixos-26.05-small 5.2.0
- nixpkgs-26.05-darwin 5.2.0

pkgs.php84Packages.cyclonedx-php-composer

Composer plugin that facilitates the creation of a CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects

nixos-unstable 5.2.0
- nixpkgs-unstable 5.2.0
- nixos-unstable-small 5.2.0
nixos-26.05 5.2.0
- nixos-26.05-small 5.2.0
- nixpkgs-26.05-darwin 5.2.0

pkgs.php85Packages.cyclonedx-php-composer

Composer plugin that facilitates the creation of a CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects

nixos-unstable 5.2.0
- nixpkgs-unstable 5.2.0
- nixos-unstable-small 5.2.0
nixos-26.05 5.2.0
- nixos-26.05-small 5.2.0
- nixpkgs-26.05-darwin 5.2.0

pkgs.phpPackages.composer-local-repo-plugin

Composer plugin that facilitates the creation of a local composer type repository

nixos-unstable 1.1.0
- nixpkgs-unstable 1.1.0
- nixos-unstable-small 1.1.0
nixos-26.05 1.1.0
- nixos-26.05-small 1.1.0
- nixpkgs-26.05-darwin 1.1.0

pkgs.php82Packages.composer-local-repo-plugin

Composer plugin that facilitates the creation of a local composer type repository

nixos-unstable 1.1.0
- nixpkgs-unstable 1.1.0
- nixos-unstable-small 1.1.0
nixos-26.05 1.1.0
- nixos-26.05-small 1.1.0
- nixpkgs-26.05-darwin 1.1.0

pkgs.php83Packages.composer-local-repo-plugin

Composer plugin that facilitates the creation of a local composer type repository

nixos-unstable 1.1.0
- nixpkgs-unstable 1.1.0
- nixos-unstable-small 1.1.0
nixos-26.05 1.1.0
- nixos-26.05-small 1.1.0
- nixpkgs-26.05-darwin 1.1.0

pkgs.php84Packages.composer-local-repo-plugin

Composer plugin that facilitates the creation of a local composer type repository

nixos-unstable 1.1.0
- nixpkgs-unstable 1.1.0
- nixos-unstable-small 1.1.0
nixos-26.05 1.1.0
- nixos-26.05-small 1.1.0
- nixpkgs-26.05-darwin 1.1.0

pkgs.php85Packages.composer-local-repo-plugin

Composer plugin that facilitates the creation of a local composer type repository

nixos-unstable 1.1.0
- nixpkgs-unstable 1.1.0
- nixos-unstable-small 1.1.0
nixos-26.05 1.1.0
- nixos-26.05-small 1.1.0
- nixpkgs-26.05-darwin 1.1.0

Package maintainers

@patka-123 patka <patka@patka.dev>
@Ma27 Maximilian Bosch <maximilian@mbosch.me>
@talyz Kim Lindberger <kim.lindberger@gmail.com>
@piotrkwiecinski Piotr Kwiecinski <piokwiecinski+nixpkgs@gmail.com>
@aanderse Aaron Andersen <aaron@fosslib.net>
@kugland André Kugland <kugland@gmail.com>