CVE:CVE-2021-41116
CNNVD:CNNVD-202110-243
composer是 开源的一个应用软件。提供一个声明，管理和安装PHP项目的依赖项。
Composer 存在命令注入漏洞，该漏洞源于Composer 会安装不受信任的依赖项。
solution:Upgrade getcomposer composer to a higher version than 1.10.23,2.1.9,and avoid the version (,1.10.23),[2.0.0,2.1.9); Upgrade tenable tenable.sc to a higher version than 5.21.0,and avoid the version (,5.21.0)