Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2023-1788Mediumgrumpydictator/firefly-iii: Firefly III insufficiently expires sessionsCVE-2023-0265Highuvdesk/community-skeleton: Uvdesk remote code execution vulnerabilityCVE-2023-0325Mediumuvdesk/community-skeleton: Uvdesk vulnerable to stored cross-site scripting (XSS)CVE-2023-1703Mediumpimcore/pimcore: pimcore is vulnerable to cross-site scripting in Composite indices key fieldCVE-2023-28851Mediumbigfork/silverstripe-form-capture: Silverstripe Form Capture vulnerable to stored cross-site-scriptingCVE-2023-28850Mediumpimcore/perspective-editor: Pimcore Perspective Editor vulnerable to stored cross-site scripting (XSS) in perspective nameCVE-2023-1789Mediumgrumpydictator/firefly-iii: Firefly III vulnerable to improper input validationCVE-2023-27159Highappwrite/server-ce: Appwrite Server-Side Request Forgery vulnerabilityCVE-2023-29141Criticalmediawiki/core: X-Forwarded-For header allows brute-forcing autoblocked IP addressesCVE-2023-1701Mediumpimcore/pimcore: Pimcore vulnerable to Reflected XSS in Predefined Properties module in SettingsCVE-2023-1702Mediumpimcore/pimcore: Pimcore Cross-site Scripting in Predefined Asset Metadata module in SettingsCVE-2023-1704Mediumpimcore/pimcore: pimcore is vulnerable to cross-site scripting in translate moduleCVE-2023-1753Mediumthorsten/phpmyfaq: phpMyFAQ has weak password requirementsCVE-2023-1754Mediumthorsten/phpmyfaq: phpMyFAQ vulnerable to improper input validationCVE-2023-1755Mediumthorsten/phpmyfaq: phpMyFAQ Cross-site Scripting vulnerabilityCVE-2023-1759Mediumthorsten/phpmyfaq: phpMyFAQ Stored Cross-site Scripting vulnerabilityCVE-2023-1760Mediumthorsten/phpmyfaq: phpMyFAQ Stored Cross-site Scripting vulnerabilityCVE-2023-1761Mediumthorsten/phpmyfaq: phpMyFAQ Code Injection vulnerabilityCVE-2023-1762Highthorsten/phpmyfaq: thorsten/phpmyfaq vulnerable privilege escalation from improper privilege management CVE-2023-28447Highsmarty/smarty: smarty Cross-site Scripting vulnerability in Javascript escaping CVE-2023-28604Mediumsitegeist/fluid-components: Fluid Components TYPO3 extension vulnerable to Cross-Site ScriptingCVE-2023-22251Mediummagento/community-edition: Magento Open Source allows Incorrect AuthorizationCVE-2023-22247Highmagento/community-edition: Magento Open Source allows XML InjectionCVE-2023-22250Mediummagento/community-edition: Magento Open Source allows Improper Access ControlCVE-2023-1069Mediumreally-simple-plugins/complianz-gdpr: Complianz WordPress plugin vulnerable to cross-site scripting

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo