Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-4H54-VWX9-3VR3Mediumsilverstripe/framework: Silverstripe XSS In FormAction GHSA-34Q6-XQXH-GQ39Mediumsilverstripe/framework: Silverstripe XSS In rewritten hash links GHSA-88JP-9JRV-6368Mediumsilverstripe/framework: Silverstripe XSS In GridField print GHSA-R32J-MR8P-HFP8Mediumsilverstripe/framework: Silverstripe XSS in TreeDropdownField and TreeMultiSelectField GHSA-G43W-98WP-M694Mediumsilverstripe/framework: SilverStripe framework XML Quadratic Blowup Attack GHSA-5F5V-5C3V-GW5VMediumsilverstripe/framework: Silverstripe IE requests not properly behaving with rewritehashlinks GHSA-W8FQ-XGVH-CXC2Mediumsilverstripe/forum: Silverstripe Forum Module CSRF Vulnerability CVE-2024-25738Criticalvufind/vufind: VuFind Server-Side Request Forgery (SSRF) vulnerability CVE-2024-25737Criticalvufind/vufind: VuFind Server-Side Request Forgery (SSRF) vulnerability GHSA-3MM9-2P44-RW39Highsilverstripe/cms: Silverstripe SiteTree Creation Permission Vulnerability GHSA-R97R-64VP-FGHMMediumsilverstripe/cms: Silverstripe XSS vulnerability via VirtualPage GHSA-6HH6-59J2-QRXWMediumsilverstripe/cms: Silverstripe History XSS Vulnerability GHSA-779C-7W4P-2C4GLowsilverstripe/admin: Silverstripe admin XSS Vulnerability via WYSIWYG editor GHSA-83JV-4PRM-34G7Criticalshopware/shopware: Shopware Remote Code Execution Vulnerability GHSA-7336-GHHP-F2QJCriticalshopware/shopware: Shopware Remote Code Execution Vulnerability GHSA-JQR7-5H7R-CH8PMediumshopware/shopware: Shopware Non-Persistent XSS in the Frontend GHSA-Q3G4-2VW9-XV27Criticalshopware/shopware: Shopware Remote Code Execution Vulnerability GHSA-6WQP-7G94-F69JMediumsensiolabs/connect: sensiolabs/connect has a Cross-Site Request Forgery Vulnerability GHSA-9PHW-7H96-Q3RVHighscheb/two-factor-bundle: scheb/two-factor-bundle bypass two-factor authentication with remember-me option GHSA-H6MP-MC7G-MG49Highscheb/two-factor-bundle: scheb/two-factor-bundle bypass two-factor authentication with unverified JWT trusted device token CVE-2024-35191Mediumverbb/formie: verbb/formie Server-Side Template Injection for variable-enabled settings CVE-2024-34899Mediumwwbn/avideo: AVideo cross-site scripting vulnerability in the view/about.php page GHSA-2G98-F9JV-W8C5Highrobrichards/xmlseclibs: robrichards/xmlseclibs XPath injection GHSA-7V7M-PCW5-H3CGMediumpusher/pusher-php-server: Pusher Service Channel Authentication Bypass GHSA-7G7C-QHF3-X59PCriticalpropel/propel1: propel/propel1 SQL injection possible with limit() on MySQL

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.