Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2023-3565Mediumnilsteampassnet/teampass: TeamPass Cross-site Scripting vulnerability CVE-2023-3566Mediumwallabag/wallabag: Wallabag vulnerable to Allocation of Resources Without Limits or Throttling CVE-2023-3553Highnilsteampassnet/teampass: TeamPass information exposure vulnerability CVE-2023-3552Highnilsteampassnet/teampass: TeamPass vulnerable to Improper Encoding or Escaping of Output CVE-2023-3551Criticalnilsteampassnet/teampass: TeamPass Code Injection vulnerability CVE-2023-37269Lowwintercms/winter: Winter CMS stored XSS through privileged upload of SVG file CVE-2018-1000888Highpear/archive_tar: Archive_Tar contains Potential RCE if filename starts with phar://CVE-2023-3531Highnilsteampassnet/teampass: TeamPass Cross-site Scripting vulnerability CVE-2023-37260Highleague/oauth2-server: league/oauth2-server key exposed in exception message when passing as a string and providing an invalid pass phrase CVE-2023-36828Mediumstatamic/cms: Statamic's Antlers sanitizer cannot effectively sanitize malicious SVG CVE-2023-22249Lowmagento/community-edition: Magento Open Source allows Cross-Site Scripting (XSS)CVE-2020-36665Mediumartesaos/seotools: Artesãos SEOTools Open Redirect vulnerability CVE-2020-36664Mediumartesaos/seotools: Artesãos SEOTools Open Redirect vulnerability CVE-2020-36663Mediumartesaos/seotools: Artesãos SEOTools Open Redirect vulnerability CVE-2022-43695Mediumconcrete5/concrete5: Concrete CMS Cross-site Scripting vulnerability GHSA-QXH3-JGVH-X55JMediumopensource-workshop/connect-cms: Connect-CMS Privilege Escalation Vulnerability CVE-2023-23684Mediumwp-graphql/wp-graphql: WPGraphQL Plugin vulnerable to Server Side Request Forgery (SSRF)CVE-2023-37302Mediumwikibase/wikibase: MediaWiki Cross-site Scripting vulnerability CVE-2023-3469Mediumthorsten/phpmyfaq: phpMyFAQ Cross-site Scripting CVE-2023-34099Mediumshopware/shopware: Shopware improper mail validation vulnerability CVE-2023-34098Mediumshopware/shopware: Shopware dependency configuration exposed CVE-2023-3303Lowadmidio/admidio: Admidio Improper Access Control vulnerability CVE-2023-3302Highadmidio/admidio: Admidio Improper Neutralization of Formula Elements in a CSV File vulnerability CVE-2023-3304Mediumadmidio/admidio: Admidio Improper Access Control vulnerability CVE-2023-30260Highbillz/raspap-webgui: RaspAP raspap-webgui Command Injection vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo