VDB
GCVE-110-COMPOSER-2026-006844
GCVE-110-COMPOSER-2026-006844
Advisory Published
[P-PASSWD-READ] Reading system password files — matched: $this->assetComposer->getAssetFileName('../../../etc/passwd');
Weaknesses (CWE)
CWE-506Embedded Malicious CodeCWE-522Insufficiently Protected Credentials
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| packagist | jbsnewmedia/asset-composer-bundle | 1.1.7 (affected), 1.2.0 (affected) | — |
Browse GCVE Records
2,661 records in the GCVE database · Updated September 7, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.