Pinkary - One Link. All Your Socials.

Punyapal Shah ⚡

@MrPunyapal

1mo ago

🚨 Composer security alert

Two command injection vulnerabilities found (CVE-2026-40176, CVE-2026-40261) via the Perforce driver.

👉 Update to 2.9.6 / 2.2.27
👉 Avoid untrusted composer.json

#PHP #Laravel #Security #Composer
blog.packagist.com/composer-2-9-6-perforce-driver-command-injection-vulnerabilities

36

Tobias Schottstädt

@chim

Edited: 3mos ago

How do you keep track of your package dependency updates across all your projects?

If the answer is “not at all” or “only with great difficulty,”
I have something for you:

Laravel Security
Let your projects notify you via Laravel notifications (DB, user email), stored email addresses, and Slack.

Daily checks of Composer and NPM for vulnerabilities and weekly checks for new updates to the packages you use.

Simply integrate the existing view as a component and set up the notification channels according to your preferences. And from now on, keep an eye on everything 😎

github.com/xchimx/laravel-security
Compatible with Laravel 10.x 11.x und 12.x

#Laravel #PHP #Security #Composer #NPM #Dependencies #Updates

71

Sushil Kumar

@CodeWithSushil

3mos ago

I finally solved my Composer hanging/stuck issue 🚀
Set up a local proxy server and routed downloads using PHP stream functions.

Added real-time debugging with log files to trace where it was freezing.

Result: smooth installs, zero guesswork 😌

#PHP #composer #packagist #proxy