Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
GHSA-HFPP-2VHW-QQ43Highezsystems/ezplatform-user: eZ Platform Admin UI Password reset vulnerabilityGHSA-2W9P-XXQR-H253Highezsystems/ezplatform-kernel: eZ Platform Object Injection in SiteAccessMatchListenerGHSA-Q73V-79X3-JV2WHighezsystems/ezplatform-admin-ui: eZ Platform Admin UI Cross-site Scripting vulnerabilityGHSA-CG84-55JX-4237Highezsystems/ezplatform-admin-ui: eZ Platform Password reset vulnerabilityGHSA-4C2W-V5RQ-5MX7Mediumezsystems/ezplatform-admin-ui-assets: eZ Platform Editor Cross-site Scripting (XSS)GHSA-JRPW-8884-2747Mediumezsystems/ezplatform-admin-ui-assets: eZ Platform Bundled jQuery affected by CVE-2019-11358GHSA-9CQ2-PCGR-8H62Highezsystems/ezfind-ls: Cross-site Scripting in eZFind spellcheckGHSA-XMP3-7745-G4VJMediumezsystems/ez-support-tools: ezsystems/ez-support-tools Failing access control in system info viewGHSA-JQ9Q-6P42-QPR7Highezsystems/ezdemo-ls-extension: Cross-site Scripting (XSS) in DemoBundle/ezdemo bundled VideoJSGHSA-8C85-4RR5-CHR4Highezsystems/demobundle: Cross-site Scripting (XSS) in DemoBundle/ezdemo bundled VideoJSGHSA-MVF6-3F2G-XFXFMediumendroid/qr-code-bundle: endroid/qr-code-bundle File Disclosure via logo_path query parameterGHSA-QF65-HPH9-453RMediumdrupal/drupal: Drupal Cross-Site Scripting (XSS) affecting CKEditor Third-party libraryGHSA-J66P-FVP2-FXHJHighdrupal/drupal: Drupal core Arbitrary PHP code executionGHSA-337W-FXPQ-5M34Mediumdrupal/drupal: Drupal core uses a vulnerable Third-party library CKEditorGHSA-WXFG-253G-M7R4Mediumdrupal/drupal: Drupal core Open Redirect vulnerabilityGHSA-M9FV-WHQ2-6WMCHighdrupal/drupal: Drupal core Multiple vulnerabilities due to the use of the third-party library Archive_TarGHSA-5X28-3F32-X523Mediumdrupal/drupal: Drupal core Access control bypass GHSA-W333-5F96-MJRRMediumdrupal/drupal: Drupal core Denial of ServiceGHSA-JF8C-36VW-98X4Criticaldrupal/drupal: Drupal core Remote Code ExecutionGHSA-JJX7-8462-W4M4Criticaldrupal/drupal: Drupal Core Insufficient Contextual Links validation leads to Remote Code ExecutionGHSA-58XV-7H9R-MX3CMediumdrupal/drupal: Drupal Malicious file upload with filenames stating with dotGHSA-X6V2-XMRQ-574JMediumdrupal/drupal: Drupal Anonymous Open RedirectGHSA-86XW-VMCX-9MJ4Mediumdrupal/drupal: Drupal Content moderation Access bypassGHSA-R67R-42WX-C8R7Mediumdrupal/drupal: Drupal External URL injection through URL aliases leading to Open RedirectGHSA-VFGC-C76H-MWH4Mediumdrupal/core: Drupal core Cross-Site Scripting (XSS) vulnerabilities

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo