CMS Drupal

CVE-2018-7600 | Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' RCE (SA-CORE-2018-002)

While Composer isn't required when using Drupal core, many Drupal site builders use it as the preferred way of assembling websites (myself included).

 Add a composer.json file to your Drupal 8 module. The example below gives everything you need.

I was amazed and slightly horrified. At the time, I was a web developer working for a federally funded non profit

When you purchase your tickets, you may notice that the process for registering is a little different than before. 

The source was the top 1,000,000 websites from Alexa, dumped on 13th of November 2014. So the data should be reasonably up-to-date.