Apr 142026 New PHP Composer Flaws Enable Arbitrary Command Execution — Patches Released Two Composer flaws (CVE-2026–40176, CVE-2026–40261) allow command execution via Perforce configurations, prompting urgent updates.