Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2023-33736Mediumdcat/laravel-admin: Dcat-Admin vulnerable to Stored Cross-site ScriptingCVE-2023-2998Mediumthorsten/phpmyfaq: thorsten/phpmyfaq vulnerable to cross-site scriptingCVE-2023-2999Mediumthorsten/phpmyfaq: thorsten/phpmyfaq vulnerable to cross-site scriptingCVE-2023-30253Highdolibarr/dolibarr: Dolibarr vulnerable to remote code execution via uppercase manipulationCVE-2023-2817Mediumcraftcms/cms: Stored cross site scripting in Craft CMSCVE-2023-33197Mediumcraftcms/cms: Craft CMS stored XSS in indexedVolumesCVE-2023-33196Mediumcraftcms/cms: Craft CMS stored XSS in review volumeCVE-2023-33195Mediumcraftcms/cms: Craft CMS XSS in RSS widget feedCVE-2023-33194Lowcraftcms/cms: CraftCMS stored XSS in Quick Post widget error messageCVE-2023-2881Mediumpimcore/customer-management-framework-bundle: Pimcore customers' list user password hash is disclosedCVE-2023-2859Highnilsteampassnet/teampass: Code injection in nilsteampassnet/teampassCVE-2023-32679Highcraftcms/cms: Craft CMS vulnerable to Remote Code Execution via unrestricted file extension CVE-2023-32692Criticalcodeigniter4/framework: Remote Code Execution Vulnerability in Validation Placeholders in CodeIgniter4CVE-2023-2666Mediumfroxlor/froxlor: Froxlor vulnerable to Allocation of Resources Without Limits or ThrottlingCVE-2023-2665Highfrancoisjacquet/rosariosis: RosarioSIS Stores Sensitive Data in a Mechanism without Access ControlCVE-2023-30124Mediumlavalite/cms: LavaLite vulnerable to Cross Site ScriptingCVE-2023-26044Mediumreact/http: ReactPHP's HTTP server continues parsing unused multipart parts after reaching input field and file upload limitsCVE-2023-2756Highpimcore/customer-management-framework-bundle: pimcore/customer-management-framework-bundle has SQL Injection vulnerability in Segment Assignment queryCVE-2023-2753Mediumthorsten/phpmyfaq: phpMyFAQ vulnerable to stored Cross-site ScriptingCVE-2023-2752Mediumthorsten/phpmyfaq: phpMyFAQ vulnerable to stored Cross-site ScriptingCVE-2021-27131Mediummoodle/moodle: Moodle vulnerable to stored Cross-site ScriptingCVE-2023-2730Mediumpimcore/pimcore: Pimcore Cross-site Scripting vulnerabilityCVE-2023-32073Highwwbn/avideo: WWBN AVideo command injection vulnerabilityCVE-2023-30130Highcraftcms/cms: CraftCMS allows remote attacker to execute arbitrary code via crafted script to Section parameterCVE-2023-27238Criticallavalite/cms: LavaLite vulnerable to web cache poisoning

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo