Setup PHP: GitHub tokens configured by setup-php may be exposed through pinned affected Composer versions
Moderate severity
GitHub Reviewed
Published
May 14, 2026
in
shivammathur/setup-php
•
Updated May 20, 2026
Give feedback on Dependabot alerts