Security News New PHP Composer Flaws Enable Arbitrary Command Execution TheHackerNews Daniel Bender 14 Apr 2026 Two Composer flaws (CVE-2026-40176, CVE-2026-40261) allow command execution via Perforce configurations, prompting urgent updates.