VDB

GCVE-110-COMPOSER-2026-018955

GCVE-110-COMPOSER-2026-018955
Advisory Published
Vulnetix · Advisory published June 22, 2026
[G-PHP-INLINE] PHP inline code execution — matched: "php -r \"file_exists('config/environment/.env.app.php') || copy('config/environment/.env.example.php', 'config/environment/.env.app.php');\""

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Affected Products

VendorProductVersionsPlatforms
packagistrdev/project* (affected)

References

advisory
web

Browse GCVE Records

73,834 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›