Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2024-34500Mediumsamwilson/unlinked-wikibase: MediaWiki UnlinkedWikibase Cross-site Scripting vulnerabilityCVE-2024-34467Mediumtopthink/framework: ThinkPHP Cross-Site Scripting VulnerabilityCVE-2024-34460Mediumtribalsystems/zenario: Zenario's Tree Explorer tool from Organizer affected by Cross-site ScriptingCVE-2024-34461Criticaltribalsystems/zenario: Zenario uses Twig filters insecurely in the Twig Snippet pluginCVE-2024-34067Mediumpterodactyl/panel: Pterodactyl panel's admin area vulnerable to Cross-site ScriptingCVE-2024-33851Mediumparagonie/ecc: mdanter/ecc affected by timing vulnerability in cryptographic side-channelsCVE-2024-31828Mediumlavalite/cms: Lavalite CMS Cross Site Scripting vulnerabilityCVE-2024-33670Mediumpassbolt/passbolt_api: Passbolt API allows HTML injectionGHSA-346H-749J-R28WCriticalmdanter/ecc: PHPECC vulnerable to multiple cryptographic side-channel attacksGHSA-VJWG-28GV-PM8HMediumpimcore/pimcore: Pimcore TinyMCE Bundle - tinymce CVE-2024-29203, CVE-2024-29881CVE-2014-8089Criticalzendframework/zendframework1: Zend Framework SQL injection vulnerabilityCVE-2018-7602Criticaldrupal/core: Drupal Core Remote Code Execution VulnerabilityCVE-2024-32480Highlibrenms/librenms: LibreNMS vulnerable to a Time-Based Blind SQL injection leads to database extractionCVE-2024-32479Highlibrenms/librenms: LibreNMS uses Improper Sanitization on Service template name leads to Stored XSSCVE-2024-32461Highlibrenms/librenms: LibreNMS vulnerable to SQL injection time-based leads to database extractionCVE-2024-22640Mediumtecnickcom/tcpdf: TCPDF vulnerable to Regular Expression Denial of ServiceCVE-2024-23817Highdolibarr/dolibarr: Dolibarr Application Home Page has HTML injection vulnerabilityCVE-2024-31503Highdolibarr/dolibarr: Dolibarr vulnerable to Cross-Site Request ForgeryCVE-2024-32489Mediumtecnickcom/tcpdf: TCPDF Cross-site Scripting vulnerabilityCVE-2024-32003Highwinter/wn-dusk-plugin: Dusk plugin may allow unfettered user authentication in misconfigured installsCVE-2022-25777Mediummautic/core: Mautic: MST-48 Server-Side Request Forgery in Asset section CVE-2022-25776Highmautic/core: Mautic Sensitive Data Exposure due to inadequate user permission settingsCVE-2022-25775Mediummautic/core: Mautic SQL Injection in dynamic ReportsCVE-2021-27916Highmautic/core: Mautic vulnerable to Relative Path Traversal / Arbitrary File Deletion due to GrapesJS builderCVE-2024-29800Hightimber/timber: timber/timber vulnerable to Deserialization of Untrusted Data

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo