Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-23830Highmantisbt/mantisbt: MantisBT Host Header Injection vulnerability CVE-2024-1651Criticaltorrentpier/torrentpier: Deserialization of Untrusted Data in Torrentpier CVE-2024-25983Mediummoodle/moodle: Authorization Bypass in moodle CVE-2024-25978Highmoodle/moodle: Uncontrolled Resource Consumption in moodle CVE-2024-25982Highmoodle/moodle: Cross-Site Request Forgery in moodle CVE-2024-25981Mediummoodle/moodle: Improper Access Control in moodle CVE-2024-25980Mediummoodle/moodle: Improper Access Control in moodle CVE-2024-25979Mediummoodle/moodle: Improper Handling of Parameters in moodle CVE-2024-25298Highredaxo/source: Code injection in REDAXO CVE-2023-49508Mediumyetiforce/yetiforce-crm: YetiForceCRM Directory Traversal vulnerability CVE-2024-20720Highmagento/community-edition: Magento Open Source allows OS Command Injection CVE-2024-20719Highmagento/community-edition: Magento Open Source allows Cross-Site Scripting (XSS)CVE-2024-20718Mediummagento/community-edition: Magento Open Source allows Cross-Site Request Forgery (CSRF)CVE-2024-20716Mediummagento/community-edition: Magento Open Source allows Uncontrolled Resource Consumption CVE-2024-22188Hightypo3/cms-core: TYPO3 Install Tool vulnerable to Code Execution CVE-2023-30451Mediumtypo3/cms-core: Path Traversal in TYPO3 File Abstraction Layer Storages CVE-2024-25121Hightypo3/cms-core: TYPO3 vulnerable to Improper Access Control Persisting File Abstraction Layer Entities via Data Handler CVE-2024-25120Mediumtypo3/cms-core: TYPO3 vulnerable to Improper Access Control of Resources Referenced by t3:// URI Scheme CVE-2024-25119Mediumtypo3/cms-core: TYPO3 Install Tool vulnerable to Information Disclosure of Encryption Key CVE-2024-24751Mediumderhansen/sf_event_mgt: derhansen/sf_event_mgt vulnerable to Broken Access Control in Backend Module CVE-2024-25118Mediumtypo3/cms-core: TYPO3 Backend Forms vulnerable to Information Disclosure of Hashed Passwords GHSA-6CCV-8FGF-CJPWMediumdrupal/core: Drupal core Denial of Service vulnerability CVE-2024-25108Criticalpixelfed/pixelfed: Pixelfed doesn't check OAuth Scopes in API routes, giving elevated permissions CVE-2024-1439Mediummoodle/moodle: Moodle Improper Access Control vulnerability CVE-2024-1246Lowconcrete5/concrete5: Concrete CMS vulnerable to reflected XSS via the Image URL Import Feature

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.