Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
Jede Zeile ist Paketindex-Metadaten für eine Version, Architektur, Suite und ein Repository. Namen, URLs und Größen stammen aus der Quelle; ein Link ist ein veränderbarer Abrufort, kein Weitergabanspruch von OpenFactory.
Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an untrusted composer.lock file could set s
Composer is a dependency Manager for the PHP language. Prior to 1.10.28, 2.2.28, and 2.9.8, Composer\IO\BaseIO::loadConfiguration() validates GitHub OAuth tokens with the regex ^[.A-Za-z0-9_]+$ and in
Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, a Composer package bin entry containing .. path segments can resolve outside the package install directory and cause
Composer is a dependency manager for PHP. Versions 1.0 through 2.2.26 and 2.3 through 2.9.5 contain a command injection vulnerability in the Perforce::generateP4Command() method, which constructs shel
Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.
2.10.3-1.1 / noarchBeobachtet Sep 1, 2026sha512 b1599d4cd38e…2ecec0eaPrüfsumme der Quelle
Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Prüfsumme der Quelle (sha512): b1599d4cd38e0b0979bbfe717978d37d9a5a8d5b22a938db8705ece2429e2f8415715781321c37deb4e0eb36e8620d9b872ad68afbf81e95869bfa892ecec0ea
