Composer: versions, end of support and vulnerabilities
Release branches of Composer with the latest version, the end of support and the vulnerabilities that are still open in the latest version.
The NVD lists 9 vulnerabilities for Composer, 0 of them actively exploited. Last checked on 02/11/2026.
Release branches
Composer 2.11
Latest version: 2.11.1, released on 30/10/2026
End of support: no date known
No known vulnerability open in 2.11.1
Composer 2.2
Latest version: 2.2.31, released on 29/10/2026
End of support: 31/12/2026
No known vulnerability open in 2.2.31
Composer 2.10
Latest version: 2.10.3, released on 27/08/2026
End of support: 29/10/2026
No known vulnerability open in 2.10.3
Composer 2.9
Latest version: 2.9.8, released on 13/05/2026
End of support: 28/05/2026
No known vulnerability open in 2.9.8
Composer 1
Latest version: 1.10.28, released on 13/05/2026
End of support: 30/05/2026
2 known vulnerabilities open in 1.10.28
Composer 2.8
Latest version: 2.8.12, released on 19/09/2025
End of support: 13/11/2025
3 known vulnerabilities open in 2.8.12
Composer 2.7
Latest version: 2.7.9, released on 04/09/2024
End of support: 02/10/2024
3 known vulnerabilities open in 2.7.9
Composer 2.6
Latest version: 2.6.6, released on 08/12/2023
End of support: 08/02/2024
4 known vulnerabilities open in 2.6.6
Composer 2.5
Latest version: 2.5.8, released on 09/06/2023
End of support: 01/09/2023
5 known vulnerabilities open in 2.5.8
Composer 2.4
Latest version: 2.4.4, released on 27/10/2022
End of support: 20/12/2022
5 known vulnerabilities open in 2.4.4
Composer 2.3
Latest version: 2.3.10, released on 13/07/2022
End of support: 16/08/2022
5 known vulnerabilities open in 2.3.10
Composer 2.1
Latest version: 2.1.14, released on 30/11/2021
End of support: 22/12/2021
6 known vulnerabilities open in 2.1.14
Composer 2.0
Latest version: 2.0.14, released on 21/05/2021
End of support: 03/06/2021
7 known vulnerabilities open in 2.0.14
Most recent vulnerabilities of Composer
- CVE-2026-40261, CVSS 3.1: 8.8, 15/04/2026
- CVE-2026-40176, CVSS 3.1: 7.8, 15/04/2026
- CVE-2025-67746, CVSS 4.0: 1.3, 30/12/2025
- CVE-2024-24821, CVSS 3.1: 7.8, 09/02/2024
- CVE-2023-43655, CVSS 3.1: 8.8, 29/09/2023
- CVE-2015-8371, CVSS 3.1: 8.8, 21/09/2023
- CVE-2022-24828, CVSS 3.1: 8.8, 13/04/2022
- CVE-2021-41116, CVSS 3.1: 9.8, 05/10/2021
- CVE-2021-29472, CVSS 3.1: 8.8, 27/04/2021
Get notified
Add Composer with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.
Already have an account? Log in and add Composer