Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2023-5545Mediummoodle/moodle: Moodle Exposure of Sensitive Information to an Unauthorized Actor vulnerability CVE-2023-5548Mediummoodle/moodle: Moodle Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability CVE-2023-5549Mediummoodle/moodle: Moodle Improper Access Control vulnerability CVE-2023-5539Mediummoodle/moodle: Moodle Code Injection vulnerability CVE-2023-5542Mediummoodle/moodle: Moodle Improper Access Control vulnerability CVE-2023-5546Mediummoodle/moodle: Moodle Cross-site Scripting vulnerability CVE-2023-5541Mediummoodle/moodle: Moodle Cross-site Scripting vulnerability CVE-2023-5540Highmoodle/moodle: Moodle Code Injection vulnerability CVE-2023-47110Mediumprestashop/blockreassurance: Any value can be changed in the configuration table by an employee having access to block reassurance module CVE-2023-47379Mediummicroweber/microweber: Microweber Cross-site Scripting vulnerability CVE-2023-47109Mediumprestashop/blockreassurance: PrestaShop blockreassurance BO User can remove any file from server when adding a and deleting a block CVE-2017-20187Lowfloriangaerber/magnesium: Magnesium-PHP Injection vulnerability GHSA-GV2C-5G79-H73CLowezsystems/ezplatform-kernel: Ibexa ezplatform-kernel download route allows filename change GHSA-G95C-XC83-8353Lowibexa/core: Ibexa DXP Download route allows filename change GHSA-7CRC-R3WG-CFGFCriticalezsystems/ezplatform-solr-search-engine: Json response for search reveals Solr credentials GHSA-V6XP-CCVX-W52MCriticalibexa/solr: Json response for search reveals Solr credentials GHSA-946C-F9W6-2C25Lowezsystems/ezpublish-kernel: Download route allows filename change in eZpublish kernel CVE-2023-46947Highintelliants/subrion: Subrion remote command execution vulnerability CVE-2023-46725Highfoodcoopshop/foodcoopshop: FoodCoopShop Server-Side Request Forgery vulnerability CVE-2023-46925Mediumreportico-web/reportico: Reportico Cross-site Scripting vulnerability CVE-2023-5917Mediumphpbb/phpbb: phpBB's Smiley Pack acp_icons.php main pack vulnerable to cross site scripting CVE-2023-46722Mediumpimcore/admin-ui-classic-bundle: Pimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previews CVE-2023-4198Mediumdolibarr/dolibarr: Dolibarr Improper Input Validation vulnerability CVE-2023-4197Highdolibarr/dolibarr: Dolibarr Improper Input Validation vulnerability CVE-2023-5844Mediumpimcore/admin-ui-classic-bundle: pimcore/admin-ui-classic-bundle Unverified Password Change

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo