CVE:CVE-2021-29472
CNNVD:CNNVD-202104-2004
composer是 开源的一个应用软件。提供一个声明，管理和安装PHP项目的依赖项。
Composer 存在参数注入漏洞，该漏洞源于composer.json和包源代码下载url没有被正确地清除。
solution:Upgrade getcomposer composer to a higher version than 1.10.22,2.0.13,and avoid the version (,1.10.22),[2.0,2.0.13); Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34