Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2022-25774Mediummautic/core: Mautic vulnerable to cross-site scripting in notifications via saving Dashboards CVE-2023-48865Mediumreportico-web/reportico: Reportico affected by Incorrect Access Control CVE-2021-27915Highmautic/core: Mautic vulnerable to stored cross-site scripting in description field CVE-2024-31819Criticalwwbn/avideo: WWBN AVideo Remote Code Execution CVE-2024-20758Highmagento/community-edition: Magento Open Source allows Improper Input Validation CVE-2024-20759Mediummagento/community-edition: Magento Open Source allows Cross-Site Scripting (XSS)CVE-2024-28234Mediumcontao/comments-bundle: Contao: Insufficient BBCode sanitizer CVE-2024-28191Lowcontao/core-bundle: Contao: Unencoded insert tags in the frontend CVE-2024-28190Mediumcontao/core-bundle: Contao: Cross site scripting in the file manager CVE-2024-30262Mediumcontao/core-bundle: Contao: Remember-me tokens will not be cleared after a password change CVE-2024-28235Highcontao/core-bundle: Contao: Possible cookie sharing with external domains while checking protected pages for broken links CVE-2024-31447Mediumshopware/core: Shopware Improper Session Handling in store-api account logout CVE-2024-3180Lowconcrete5/concrete5: Concrete CMS Stored XSS in blocks of type file CVE-2024-3181Lowconcrete5/concrete5: Concrete CMS Stored XSS in the Search Field CVE-2024-3179Lowconcrete5/concrete5: Concrete CMS Stored XSS in the Custom Class page editing CVE-2024-3178Lowconcrete5/concrete5: Concrete CMS Cross-site Scripting (XSS) in the Advanced File Search Filter CVE-2024-2753Lowconcrete5/concrete5: Concrete CMS Stored XSS on the calendar color settings screen GHSA-W8GF-G2VQ-J2F4Highamphp/http-client: amphp/http-client Denial of Service via HTTP/2 CONTINUATION Frames CVE-2024-2653Highamphp/http: AMPHP Denial of Service via HTTP/2 CONTINUATION Frames CVE-2024-29477Mediumdolibarr/dolibarr: Dolibarr ERP CRM Code Injection vulnerability during installation CVE-2021-27312Criticalgleez/cms: Gleez Cms Server Side Request Forgery (SSRF) vulnerability CVE-2024-30173Mediumcausal/oidc: OpenID Connect Authentication (oidc) Typo3 extension Authentication Bypass CVE-2024-3137Highuvdesk/core-framework: UVDesk Community Helpdesk Improper Privilege Management CVE-2024-3138Lowfrancoisjacquet/rosariosis: RosarioSIS cross site scripting vulnerability CVE-2024-23118Highcentreon/centreon: Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.