[HIGH] Missing input validation can lead to command execution in composer

PKSA-6zmq-d6mk-r5wm CVE-2022-24828 GHSA-x7cr-6qr6-2hh6

Affected package: composer/composer

Affected version: >=2.3,<2.3.5|>=2.0,<2.2.12|<1.10.26

Reported by:
FriendsOfPHP/security-advisories, GitHub