Supply Chain Issues in The PHP Package Management PEAR

For 15 years, supply chain issues in the PHP package management PEAR went unnoticed. PEAR was vulnerable to attack due to a cryptographic vulnerability and a problem in an out-of-date dependency. According to security experts, attackers could have caused havoc on the PHP ecosystem by exploiting a pair of long-standing vulnerabilities in package management PEAR ... Read more

The post Supply Chain Issues in The PHP Package Management PEAR appeared first on HackingVision.

featured hacking news management package pear php supply supply chain