Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
GHSA-GXXJ-G9V8-W28PHighdrupal/core: Drupal core Arbitrary PHP code executionGHSA-6GF6-24H2-66J4Mediumdrupal/core: Drupal core Open Redirect vulnerabilityGHSA-V273-J5HQ-26XPMediumdrupal/core: Drupal core uses a vulnerable Third-party library CKEditorGHSA-98H9-727M-44QVHighdrupal/core: Drupal core Multiple vulnerabilities due to the use of the third-party library Archive_TarGHSA-MH4H-27GQ-CXWJMediumdrupal/core: Drupal core Access bypassGHSA-7GWJ-7FHM-VW4WMediumdrupal/core: Drupal core unrestricted file uploadGHSA-PR99-C33P-FWF6Mediumdrupal/core: Drupal core Denial of ServiceGHSA-7V68-3PR5-H3CRCriticaldrupal/core: Drupal Core Insufficient Contextual Links validation leads to Remote Code ExecutionGHSA-6MGP-V5CM-GHG5Criticaldrupal/core: Drupal core Remote Code ExecutionGHSA-GFVF-2F25-F34RMediumdrupal/core: Drupal Anonymous Open Redirect GHSA-7F4F-P7MQ-P4FVMediumdrupal/core: Drupal External URL injection through URL aliases leading to Open RedirectGHSA-F84Q-MGJ9-8JFCMediumdrupal/core: Drupal Content moderation Access bypassGHSA-VJRG-WPM8-RHRWHighdoctrine/orm: doctrine/orm Regression in Query Parenthesis can have Security ImplicationsGHSA-6Q9V-4HQ6-5M67Criticaldoctrine/orm: Doctrine SQL injection vulnerabilityGHSA-9WV8-3H8H-X2WCMediumdoctrine/doctrine-module: doctrine/doctrine-module zero-valued authentication credentials vulnerabilityGHSA-76W8-MQX4-WJRFHighdoctrine/dbal: Doctrine DBAL SQL injection possibilityGHSA-QVGG-R6RQ-VWFXLowdatadog/dd-trace: datadog/dd-trace Circumvents open_basedir INI directiveGHSA-WQ43-8R5P-W3MCHighcontao/core: contao/core PHP object injection vulnerability allows for arbitrary code executionGHSA-WXXW-5GQ6-J2G5Criticalcontao/core: contao/core Insufficient input validation allows for code injection and remote executionGHSA-27QR-636M-WXG2Criticalcodeigniter/framework: codeigniter/framework SQL injection in ODBC database driverGHSA-Q9J3-4GHJ-6H57Mediumcodeigniter/framework: Inadequate XSS Prevention in CodeIgniter/Framework Security LibraryGHSA-2M5G-8XPW-42VPHighcartalyst/sentry: OpenCFP Framework (Sentry) Account takeover via null password reset codesGHSA-4CV2-XC5F-PX8HMediumbrotkrueml/codehighlight: Denial of Service in extension "Code Highlight" (codehighlight)GHSA-65XH-HH78-6454Mediumbrotkrueml/codehighlight: Denial of Service in extension "Code Highlight" (codehighlight)GHSA-8V5X-6VV5-JV4GMediumamphp/http: amphp/http Host Header Injection vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo