View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0007990 | OXID eShop (all versions) | 6. ------ Setup ------- | public | 2026-07-31 13:47 | 2026-07-31 13:47 |
| Reporter | Stefan_Werner | Assigned To | |||
| Priority | high | Severity | major | Reproducibility | always |
| Status | new | Resolution | open | ||
| Product Version | 7.4.1 | ||||
| Summary | 0007990: Metapackage requests insecure composer version during installation | ||||
| Description | During composer create-project --no-dev oxid-esales/oxideshop-project htdocs dev-b-7.4-ee OR composer create-project --no-dev oxid-esales/oxideshop-project htdocs dev-b-7.4-pe OR composer create-project --no-dev oxid-esales/oxideshop-project htdocs dev-b-7.4-ce this error occurs oxid-esales/oxideshop-metapackage-ce v7.4.1 requires composer/composer 2.9.8 -> found composer/composer[2.9.8] but these were not loaded, because they are affected by security advisories ("PKSA-q3ht-3g42-rg8f", "PKSA-4pm6-g63v-5rkr", "PKSA-zcdk-qnhk-hq2g"). Go to https://packagist.org/security-advisories/ to find advisory details. To ignore the advisories, add them to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config. | ||||
| Steps To Reproduce | Install shop with composer, latest version or 2.9.8 | ||||
| Additional Information | Update composer version support | ||||
| Tags | No tags attached. | ||||
| Theme | Not defined | ||||
| Browser | Not defined | ||||
| PHP Version | 8.3 | ||||
| Database Version | Not defined | ||||
