@composer 2.11.2 just dropped with the latest batch of security fixes freshly baked from your local LLM https://github.com/composer/composer/releases/tag/2.11.2
GitHubRelease 2.11.2 · composer/composerSecurity: Fixed arbitrary command execution via the prevent_url_access_callable transport option being loaded from composer.lock / vendor/composer/installed.json (GHSA-jhfp-4ppm-crmm) Security: Fix...
commit 9341e26