Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2023-6566Mediummicroweber/microweber: Microweber Business Logic ErrorsCVE-2023-26154Mediumpubnub: pubnub Insufficient Entropy vulnerabilityGHSA-7MC6-X925-7QVXMediummicrosoft/microsoft-graph-beta: Test code in published microsoft-graph-beta package exposes phpinfo()CVE-2023-49283Mediummicrosoft/microsoft-graph-core: Test code in published microsoft-graph-core package exposes phpinfo()CVE-2023-49282Mediummicrosoft/microsoft-graph: Test code in published microsoft-graph package exposes phpinfo()CVE-2023-48966Highzoujingli/thinkadmin: ThinkAdmin arbitrary file upload vulnerabilityCVE-2023-6027Mediumelijaa/phpmemcacheadmin: PHPMemcachedAdmin vulnerable to cross-site scripting (XSS) via improper encodingCVE-2023-6026Criticalelijaa/phpmemcacheadmin: PHPMemcachedAdmin Path Traversal vulnerabilityCVE-2023-49052Highmicroweber/microweber: Microweber file upload vulnerabilityCVE-2023-44383Mediumoctober/system: October CMS stored XSS by authenticated backend user with improper configurationCVE-2023-44382Criticaloctober/system: October CMS safe mode bypass using Twig sandbox escapeCVE-2023-44381Mediumoctober/system: October CMS safe mode bypass using Page template injectionCVE-2023-49087Highsimplesamlphp/xml-security: Validation of SignedInfoCVE-2023-32065Mediumoro/commerce: OroCommerce get-totals-for-checkout API endpoint returns unwanted dataCVE-2023-32064Mediumoro/customer-portal: OroCommerce Customer Portal Incorrect Customer and Customer Group Frontend Menus pages visibilityCVE-2023-32063Mediumoro/crm-call-bundle: OroCRMCallBundle has incorrect call view page visibilityCVE-2023-32062Mediumoro/calendar-bundle: OroCalendarBundle has incorrect system calendar events visibilityCVE-2022-41951Highoro/platform: OroPlatform vulnerable to path traversal during temporary file manipulationsCVE-2023-49075Highpimcore/admin-ui-classic-bundle: Pimcore Admin UI has Two Factor Authentication disabled for non admin security firewallsCVE-2023-49146Mediumrhukster/dom-sanitizer: Cross-site Scripting in DOMSanitizerCVE-2023-48707Mediumcodeigniter4/shield: Cleartext Storage of Sensitive Information in HMAC SHA256 AuthenticationCVE-2023-48708Mediumcodeigniter4/shield: Insertion of Sensitive Information into LogCVE-2023-48701Highstatamic/cms: Cross-site Scripting via uploaded assetsCVE-2023-47350Highswiftyedit/swiftyedit: Cross Site Request Forgery in SwiftyEditCVE-2023-47380Mediumadmidio/admidio: Cross-site Scripting in Admidio

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo