Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2023-45023Mediumin2code/femanager: TYPO3 extension femanager Broken Access Control vulnerability GHSA-56FM-HFP3-X3W3Mediumwallabag/wallabag: Wallabag user can disable 2FA unintentionally CVE-2023-5323Mediumdolibarr/dolibarr: Dolibarr Cross-site Scripting vulnerability CVE-2023-5319Highthorsten/phpmyfaq: phpMyFAQ Cross-site Scripting vulnerability CVE-2023-5320Criticalthorsten/phpmyfaq: phpMyFAQ Cross-site Scripting vulnerability CVE-2023-5318Mediummicroweber/microweber: Microweber uses hard coded credentials CVE-2023-5317Mediumthorsten/phpmyfaq: phpMyFaq Cross-site Scripting vulnerability CVE-2023-5316Criticalthorsten/phpmyfaq: phpMyFAQ Cross-site Scripting vulnerability CVE-2023-5227Mediumthorsten/phpmyfaq: phpMyFAQ allows unrestricted file types in image field CVE-2023-43655Highcomposer/composer: Composer Remote Code Execution vulnerability via web-accessible composer.phar CVE-2023-5256Criticaldrupal/core: Cache poisoning in drupal/core CVE-2023-43663Mediumprestashop/prestashop: PrestaShop allows users to uninstall modules from backoffice, even with low rights CVE-2023-43664Mediumprestashop/prestashop: PrestaShop allows employee without any access rights to list all installed modules CVE-2023-43884Mediumintelliants/subrion: Subrion CMS Cross-site Scripting vulnerability CVE-2023-38871Mediumgugoan/economizzer: Economizzer user enumeration vulnerability CVE-2023-38872Lowgugoan/economizzer: Economizzer Insecure Direct Object Reference vulnerability CVE-2023-38873Mediumgugoan/economizzer: Economizzer vulnerable to Clickjacking CVE-2023-38877Highgugoan/economizzer: Economizzer host header injection vulnerability CVE-2023-38874Highgugoan/economizzer: Economizzer remote code execution vulnerability CVE-2023-5244Mediummicroweber/microweber: Microweber Cross-site Scripting vulnerability CVE-2023-5192Mediumpimcore/demo: Pimcore Demo Allows GraphQL Introspection CVE-2023-43828Mediumintelliants/subrion: Subrion CMS Cross-site Scripting vulnerability in /panel/languages CVE-2023-43830Mediumintelliants/subrion: Subrion CMS XSS in /panel/configuration/financial/CVE-2023-2315Highopencart/opencart: OpenCart Path Traversal vulnerability CVE-2023-42817Mediumpimcore/admin-ui-classic-bundle: pimcore/admin-ui-classic-bundle Cross-site Scripting vulnerability in Translations

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo