Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
GHSA-MCFC-67VM-J568Mediummagento/community-edition: Magento Cross-Site Scripting (XSS) vulnerabilityGHSA-5GMH-85X8-5CX7Criticalmagento/community-edition: Magento remote code execution (RCE), Cross-Site Scripting (XSS) and other vulnerabilitiesGHSA-CV25-3PXR-4Q7XCriticalmagento/community-edition: Magento Open Source Security Advisory: Patch SUPEE-10975GHSA-26HQ-7286-MG8FCriticalmagento/community-edition: Magento Patch SUPEE-9652 - Remote Code Execution using mail vulnerabilityGHSA-6WM4-3RJJ-C8XXCriticalmagento/community-edition: Magento Security enhancements that help close RCE,XSS,CSRF and other vulnerabilitiesGHSA-PRPF-CJ87-HWVRCriticalmagento/community-edition: Magento Patch SUPEE-10752 - Multiple security enhancements vulnerabilitiesGHSA-QWVP-268G-JJM8Mediumlivewire/livewire: Data Leakage Vulnerability in livewire/livewireGHSA-H97C-QP24-439VMediumlaravel/socialite: Insecure State Generation in laravel/socialiteGHSA-7FJV-25Q9-2W88Mediumlaravel/socialite: State Guessing Vulnerability in laravel/socialiteGHSA-WQ8P-MQVG-2P5HHighlaravel/framework: laravel framework SQL Injection via limit and offset functionsGHSA-JWVJ-PWWW-3MJ5Highlaravel/framework: laravel framework Unexpected database bindings via requestsGHSA-44PG-C29V-HP6RMediumlaravel/framework: Laravel Guard bypass in Eloquent modelsGHSA-QM5C-M76R-2HFRCriticallaravel/framework: Laravel RCE vulnerability in "cookie" session driverGHSA-VR95-P7Q6-8M9QMediumlaravel/framework: Laravel Cross-site Scripting (XSS) vulnerability in blade templatingGHSA-6JVX-8CH9-J2JRHighlaravel/framework: Laravel Cookie serialization vulnerabilityGHSA-7852-W36X-6MF6Mediumlaravel/framework: Laravel Encrypter Component Potential Decryption Failure Leading to Unintended BehaviorGHSA-P62R-7637-3WWCMediumlaravel/framework: Laravel Hijacked authentication cookies vulnerabilityGHSA-RJ3W-99GC-8J58Mediumlaravel/framework: Laravel Risk of mass-assignment vulnerabilitiesGHSA-HVGW-GG3P-295JMediumklaviyo/magento2-extension: Read private customer data reclaiming carts in Klaviyo MagentoGHSA-6WJW-QF87-FV5VLowilluminate/encryption: Laravel Encrypter Failure to decryption vulnerabilityGHSA-2867-6RRM-38GRHighilluminate/cookie: Laravel Cookie serialization vulnerabilityGHSA-297G-XG4H-7W4CMediumilluminate/view: Laravel Cross-site Scripting vulnerability in blade templatingGHSA-CC2W-GHC5-M5QRMediumilluminate/database: Laravel Risk of mass-assignment vulnerabilitiesGHSA-2FFV-R4R9-R8XRCriticalilluminate/cookie: Laravel RCE vulnerability in "cookie" session driverGHSA-Q4XF-7FW5-4X8VMediumilluminate/auth: Laravel Hijacked authentication cookies vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo