Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2023-35132Mediummoodle/moodle: Moodle vulnerable to SQL InjectionCVE-2023-35133Highmoodle/moodle: Moodle vulnerable to Server Side Request ForgeryCVE-2023-35131Mediummoodle/moodle: Moodle vulnerable to Cross-site ScriptingCVE-2023-36097Criticalfunadmin/funadmin: fuadmin vulnerable to insecure file uploadCVE-2023-29931Criticalhhxsv5/laravel-s: laravel-s vulnerable to Local File InclusionCVE-2023-35169Criticalwebklex/php-imap: php-imap vulnerable to RCE through a directory traversal vulnerabilityCVE-2020-21489Criticalfeehi/cms: Liufee CMS File Upload vulnerabilityCVE-2020-21174Criticalfeehi/cms: liufee CMS File Upload vulnerabilityCVE-2020-21246Mediumsheng/yiicms: YiiCMS Cross Site Scripting vulnerabilityCVE-2023-33495Mediumcraftcms/cms: Craft CMS vulnerable to HTML injectionCVE-2020-20697Mediumkhodakhah/nodcms: NodCMS Cross Site Scripting vulnerabilityCVE-2020-20726Highgilacms/gila: GilaCMS Cross Site Request Forgery vulnerabilityCVE-2023-34448Highgetgrav/grav: Grav Server-side Template Injection (SSTI) via Twig Default FiltersCVE-2023-34253Highgetgrav/grav: Grav Server-side Template Injection (SSTI) via Denylist Bypass VulnerabilityCVE-2023-34252Highgetgrav/grav: Grav Server-side Template Injection (SSTI) via Twig Default FiltersCVE-2023-34251Criticalgetgrav/grav: Grav Server Side Template Injection (SSTI) vulnerabilityCVE-2023-35783Mediumtpwd/ke_search: ke_search (aka Faceted Search) vulnerable to Cross-Site ScriptingCVE-2023-35782Highin2code/ipandlanguageredirect: ipandlanguageredirect extension vulnerable to SQL InjectionCVE-2023-29297Highmagento/community-edition: Magento Open Source allows Improper Neutralization of Special Elements UsedCVE-2023-29291Mediummagento/community-edition: Magento Open Source allows Server-Side Request Forgery (SSRF)CVE-2023-29292Mediummagento/community-edition: Magento Open Source allows Server-Side Request Forgery (SSRF)CVE-2023-29290Mediummagento/community-edition: Magento Open Source allows Incorrect AuthorizationCVE-2023-29293Lowmagento/community-edition: Magento Open Source affected by Improper Input ValidationCVE-2023-29294Lowmagento/community-edition: Magento Open Source has Business Logic Errors VulnerabilityCVE-2023-22248Mediummagento/community-edition: Magento Open Source affected by Improper Input Validation

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo