Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2023-48294Mediumlibrenms/librenms: LibreNMS has Broken Access control on Graphs FeatureCVE-2023-48295Mediumlibrenms/librenms: LibreNMS Cross-site Scripting at Device groups Deletion featureCVE-2023-46745Mediumlibrenms/librenms: LibreNMS vulnerable to rate limiting bypass on login pageCVE-2023-48648Mediumconcrete5/concrete5: Concrete CMS allows unauthorized access because directories can be created with insecure permissionsCVE-2023-48649Lowconcrete5/concrete5: Concrete CMS Cross-site Scripting vulnerabilityGHSA-W98G-5FMX-WM4XMediumpocketmine/raklib: pocketmine/raklib reliable-ordered queue size is unlimited, allowing a session to hog server memoryCVE-2023-48219Mediumtinymce: TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodesCVE-2023-47637Highpimcore/pimcore: Pimcore SQL Injection in Admin Grid Filter API through Multiselect::getFilterConditionExt()CVE-2023-47636Mediumpimcore/admin-ui-classic-bundle: pimcore/admin-ui-classic-bundle Full Path Disclosure via re-export documentCVE-2023-48217Highstatamic/cms: Statamic CMS vulnerable to remote code execution via form uploadsCVE-2023-47130Highyiisoft/yii: yiisoft/yii deserializing untrusted user input can lead to remote code executionCVE-2023-5976Mediummicroweber/microweber: Microweber Improper Access Control vulnerabilityCVE-2023-47126Lowtypo3/cms-install: Information Disclosure in typo3/cms-install toolCVE-2023-47125Mediumtypo3/html-sanitizer: Bypassing Cross-Site Scripting Protection in TYPO3 HTML SanitizerCVE-2023-47621Highduncanmcclean/guest-entries: Guest Entries Remote code execution via file uploadsCVE-2023-47127Mediumtypo3/cms-core: TYPO3 vulnerable to Weak Authentication in Session HandlingCVE-2023-47129Highstatamic/cms: Statamic CMS remote code execution via front-end form uploadsCVE-2023-46735Mediumsymfony/webhook: Symfony potential Cross-site Scripting in WebhookControllerCVE-2023-46734Mediumsymfony/twig-bridge: Symfony potential Cross-site Scripting vulnerabilities in CodeExtension filtersCVE-2023-46733Mediumsymfony/security-http: Symfony possible session fixation vulnerabilityCVE-2023-6069Criticalfroxlor/froxlor: Froxlor Improper Input Validation vulnerabilityCVE-2023-5547Mediummoodle/moodle: Moodle Cross-site Scripting vulnerabilityCVE-2023-5551Lowmoodle/moodle: Moodle Exposure of Sensitive Information to an Unauthorized Actor vulnerabilityCVE-2023-5550Mediummoodle/moodle: Moodle Code Injection vulnerabilityCVE-2023-5544Mediummoodle/moodle: Moodle Cross-site Scripting vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo