Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2023-28819Lowconcrete5/concrete5: Concrete CMS (previously concrete5) is vulnerable to stored XSS in uploaded file and folder names CVE-2023-28475Mediumconcrete5/concrete5: Reflected cross site scripting CVE-2023-28476Mediumconcrete5/concrete5: Stored cross site scripting on tags CVE-2023-28473Criticalconcrete5/concrete5: Concrete CMS (previously concrete5) is vulnerable to possible auth bypass in the jobs section CVE-2023-28472Mediumconcrete5/concrete5: Concrete CMS missing secure cookie parameters CVE-2023-28474Mediumconcrete5/concrete5: Stored cross site scripting on saved presets CVE-2023-28471Mediumconcrete5/concrete5: Stored cross site scripting via container name CVE-2023-30854Highwwbn/avideo: Remote code injection in wwbn/avideo CVE-2023-30852Mediumpimcore/pimcore: Arbitrary File Read in Admin JS CSS files CVE-2023-2340Mediumpimcore/pimcore: Cross-site Scripting (XSS) in DataObject columns grid CVE-2023-2339Mediumpimcore/pimcore: Cross-site Scripting (XSS) in DataObject Any Getter grid operator CVE-2023-2336Mediumpimcore/pimcore: Path Traversal in Asset "import from server" option CVE-2023-2332Mediumpimcore/pimcore: Cross-site Scripting (XSS) in Conditions tab of Pricing Rules CVE-2023-2328Mediumpimcore/pimcore: Cross-site Scripting (XSS) in DataObjects QuantityValue Unit Definition CVE-2023-2327Mediumpimcore/pimcore: Cross-site Scripting (XSS) in pimcore via DataObject Class date fields CVE-2023-2323Mediumpimcore/pimcore: Cross-site Scripting (XSS) in Ecommerce Pricing Rules name field CVE-2023-2322Mediumpimcore/pimcore: Cross-site Scripting (XSS) in Document Properties Parameter CVE-2023-2338Highpimcore/pimcore: SQL Injection in AssetController CVE-2023-2342Mediumpimcore/pimcore: Cross-site Scripting (XSS) in Website Settings name field CVE-2023-2341Mediumpimcore/pimcore: Cross-site Scripting (XSS) in Admin Login too many attempts notice CVE-2023-2343Mediumpimcore/pimcore: Cross-site Scripting (XSS) in DataObject Classification Store CVE-2023-30850Highpimcore/pimcore: SQL Injection in Admin Translations API CVE-2023-30849Highpimcore/pimcore: SQL Injection in Translation Export API CVE-2023-30848Highpimcore/pimcore: SQL Injection in Admin Search Find API CVE-2020-36070Criticaltcg/voyager: Remote code execution in Voyager

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo