CVE-2025-67746 | Composer up to 2.2.25/2.9.2 ANSI Control Character injection (GHSA-59pp-r3rg-353g)

December 30, 2025 Yanac

A vulnerability, which was classified as problematic, has been found in Composer up to 2.2.25/2.9.2. Affected by this vulnerability is an unknown functionality of the component ANSI Control Character Handler. The manipulation leads to injection.

This vulnerability is listed as CVE-2025-67746. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More