Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2023-5873Mediumpimcore/pimcore: Pimcore Cross-site Scripting vulnerabilityCVE-2023-5867Mediumthorsten/phpmyfaq: Cross-site Scripting (XSS) in thorsten/phpmyfaq CVE-2023-5865Highthorsten/phpmyfaq: Insufficient Session Expiration in thorsten/phpmyfaq CVE-2023-5866Mediumthorsten/phpmyfaq: Sensitive cookie in HTTPS session without 'Secure' attribute in thorsten/phpmyfaqCVE-2023-5864Highthorsten/phpmyfaq: phpMyFAQ Cross-site Scripting vulnerabilityCVE-2023-5863Mediumthorsten/phpmyfaq: phpMyFAQ Cross-site Scripting vulnerabilityCVE-2023-5861Mediummicroweber/microweber: Cross-site Scripting (XSS) in microweber/microweberCVE-2023-46245Highkimai/kimai: Kimai (Authenticated) SSTI to RCE by Uploading a Malicious Twig FileCVE-2023-46240Highcodeigniter4/framework: CodeIgniter4 vulnerable to information disclosure when detailed error report is displayed in production environment CVE-2023-5842Mediumdolibarr/dolibarr: Cross-site Scripting (XSS) in dolibarr/dolibarrCVE-2023-46468Highjuzaweb/cms: juzawebCMS Injection vulnerabilityCVE-2023-43792Mediumbaserproject/basercms: baserCMS Code Injection Vulnerability in Mail Form FeatureCVE-2023-43649Mediumbaserproject/basercms: baserCMS CSRF vulnerability in Content preview FeatureCVE-2023-43648Mediumbaserproject/basercms: baserCMS Directory Traversal vulnerability in Form submission data management FeatureCVE-2023-43647Mediumbaserproject/basercms: baserCMS Cross-site Scripting vulnerability in File upload FeatureCVE-2023-29009Mediumbaserproject/basercms: baserCMS Cross-site Scripting Vulnerability in Favorites FeatureCVE-2023-44769Mediumtribalsystems/zenario: Zenario CMS Cross-site Scripting vulnerabilityCVE-2023-44760Mediumconcrete5/concrete5: Concrete CMS Cross-site Scripting vulnerabilityCVE-2023-43340Mediumevolutioncms/evolution: Evolution CMS Cross-site Scripting vulnerabilityCVE-2023-43875Mediumintelliants/subrion: Subrion CMS vulnerable to Cross-site ScriptingCVE-2023-43341Mediumevolutioncms/evolution: Evolution CMS Cross-site Scripting vulnerabilityCVE-2023-45819Mediumtinymce: TinyMCE XSS vulnerability in notificationManager.open APICVE-2023-45818Mediumtinymce: TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave pluginCVE-2023-44394Mediummantisbt/mantisbt: MantisBT may disclose project names to unauthorized users CVE-2023-40180Highsilverstripe/graphql: Silverstripe GraphQL has DDOS Vulnerability due to lack of protection against recursive queries

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo