Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2023-30536Mediumslim/psr7: Insecure header validation in slim/psr7CVE-2023-2017Highshopware/platform: Shopware Has Improper Control of Generation of Code in Twig rendered viewsCVE-2023-2102Mediumalextselegidis/easyappointments: alextselegidis/easyappointments vulnerable to Stored Cross-site ScriptingCVE-2023-2104Mediumalextselegidis/easyappointments: alextselegidis/easyappointments Improper Access Control vulnerabilityCVE-2023-2103Mediumalextselegidis/easyappointments: alextselegidis/easyappointments vulnerable to Stored Cross-site ScriptingCVE-2023-2105Mediumalextselegidis/easyappointments: alextselegidis/easyappointments Session Fixation vulnerabilityCVE-2023-2034Criticalfroxlor/froxlor: froxlor/froxlor vulnerable to unrestricted upload of file with dangerous typeCVE-2023-2021Mediumnilsteampassnet/teampass: nilsteampassnet/teampass vulnerable to stored cross-site scripting (XSS)CVE-2023-2014Mediummicroweber/microweber: Microweber vulnerable to cross-site scripting (XSS)CVE-2023-1971Mediumyuan1994/tpadmin: yuan1994 tpAdmin vulnerable to Server-Side Request ForgeryCVE-2023-1970Highyuan1994/tpadmin: yuan1994 tpAdmin Unrestricted Upload of File with Dangerous Type vulnerabilityCVE-2023-1757Highthorsten/phpmyfaq: thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via FAQ News link parameter CVE-2023-1886Highthorsten/phpmyfaq: thorsten/phpmyfaq vulnerable to authentication bypass CVE-2023-1887Highthorsten/phpmyfaq: thorsten/phpmyfaq vulnerable to business logic errorsCVE-2023-1877Mediummicroweber/microweber: Microweber vulnerable to command injectionCVE-2023-1880Highthorsten/phpmyfaq: thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via artlang parameterCVE-2023-1884Mediumthorsten/phpmyfaq: thorsten/phpmyfaq vulnerable to cross-site scripting (XSS) via stopword parameterCVE-2023-1882Highthorsten/phpmyfaq: thorsten/phpmyfaq vulnerable to DOM cross-site scripting (XSS) via configuration privacy note URL parameterCVE-2023-1881Highmicroweber/microweber: Microweber vulnerable to stored cross-site scripting (XSS) via X-Forwarded-For headerCVE-2023-1883Mediumthorsten/phpmyfaq: thorsten/phpmyfaq vulnerable to improper access controlCVE-2023-1885Mediumthorsten/phpmyfaq: thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via category field name parameterCVE-2023-1879Mediumthorsten/phpmyfaq: thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via updatecategory parameterCVE-2023-1878Highthorsten/phpmyfaq: thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via adminlogCVE-2023-1756Mediumthorsten/phpmyfaq: thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via HTML exportCVE-2023-1758Highthorsten/phpmyfaq: thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) in FAQ comment username parameter

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo