Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-23117Highcentreon/centreon: Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability CVE-2024-23119Highcentreon/centreon: Centreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability CVE-2024-23116Highcentreon/centreon: Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability CVE-2024-23115Highcentreon/centreon: Centreon updateGroups SQL Injection Remote Code Execution Vulnerability CVE-2024-0637Highcentreon/centreon: Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability CVE-2024-29200Mediumkimai/kimai: Kimai API returns timesheet entries a user should not be authorized to view CVE-2024-29686Highwintercms/winter: Winter CMS Server-Side Template Injection (SSTI) vulnerability CVE-2024-29904Highcodeigniter4/framework: CodeIgniter4 DoS Vulnerability CVE-2023-47438Highreportico-web/reportico: SQL Injection vulnerability in Reportico Till CVE-2024-29203Mediumtinymce: TinyMCE Cross-Site Scripting (XSS) vulnerability in handling iframes CVE-2024-29881Mediumtinymce/tinymce: TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements CVE-2024-29197Mediumpimcore/pimcore: Pimcore Preview Documents are not restricted to logged in users anymore CVE-2024-29644Mediumdcat/laravel-admin: dcat-admin Cross Site Scripting vulnerability CVE-2024-27300Mediumphpmyfaq/phpmyfaq: phpMyFAQ stored Cross-site Scripting at user email CVE-2024-28105Highphpmyfaq/phpmyfaq: phpMyFAQ's File Upload Bypass at Category Image Leads to RCE CVE-2024-28106Mediumphpmyfaq/phpmyfaq: phpMyFAQ Stored Cross-site Scripting at FAQ News Content CVE-2024-28107Highphpmyfaq/phpmyfaq: phpMyFAQ SQL injections at insertentry & saveentry CVE-2024-28108Mediumphpmyfaq/phpmyfaq: phpMyFAQ Stored HTML Injection at contentLink CVE-2024-29179Mediumphpmyfaq/phpmyfaq: phpMyFAQ Stored Cross-site Scripting at File Attachments CVE-2024-27299Highphpmyfaq/phpmyfaq: phpMyFAQ SQL Injection at "Save News"CVE-2023-48296Mediumoro/customer-portal: Storefront user can access history and most viewed data from matching back-office user with the same ID CVE-2024-28850Highjohnbillion/wp-crontrol: WP Crontrol vulnerable to possible RCE when combined with a pre-condition CVE-2023-45824Mediumoro/platform: Pinned entity creation form shows wrong data CVE-2024-29196Lowphpmyfaq/phpmyfaq: phpMyFAQ Path Traversal in Attachments CVE-2024-29499Highanchorcms/anchor-cms: Cross-Site Request Forgery in Anchor CMS

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.