Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2022-40208Mediummoodle/moodle: Moodle may allow students to bypass sequential navigation during a quiz attempt CVE-2023-1402Mediummoodle/moodle: Moodle may display roles to users who don't have access to them CVE-2023-24788Highnotrinos/notrinos-erp: NotrinosERP vulnerable to SQL Injection CVE-2023-28330Mediummoodle/moodle: Moodle arbitrary file read vulnerability CVE-2023-28329Highmoodle/moodle: Moodle SQL Injection vulnerability CVE-2023-28332Mediummoodle/moodle: Moodle vulnerable to Cross-site Scripting when algebra filter enabled but not functional CVE-2023-28331Mediummoodle/moodle: Moodle vulnerable to Cross-site Scripting CVE-2023-28335Highmoodle/moodle: Moodle vulnerable to Cross-site Request Forgery CVE-2023-28333Criticalmoodle/moodle: Moodle's Mustache pix helper contained a potential Mustache injection risk if combined with user input CVE-2023-28334Mediummoodle/moodle: Moodle may allow authenticated users to enumerate other user's names via learning plans page CVE-2023-28336Mediummoodle/moodle: Moodle may allow teachers to access the names of users they could not otherwise access CVE-2023-25655Criticalbaserproject/basercms: baserCMS allows any file to be uploaded CVE-2023-25654Criticalbaserproject/basercms: baserCMS File Uploader Remote Code Execution (RCE) vulnerability CVE-2023-28438Mediumpimcore/pimcore: Pimcore vulnerable to improper quoting of filters in Custom Reports CVE-2023-1578Mediumpimcore/pimcore: Pimcore Remote Code Execution vulnerability in Search function CVE-2023-1545Highnilsteampassnet/teampass: Teampass SQL Injection vulnerability CVE-2023-28429Mediumpimcore/pimcore: Pimcore has Cross-site Scripting vulnerability in DataObject tooltip field CVE-2023-1515Mediumpimcore/pimcore: Pimcore vulnerable to Cross-site Scripting (XSS) in Redirects CVE-2023-1517Mediumpimcore/pimcore: Pimcore has Cross site Scripting vulnerability in Schedule tab of Documents CVE-2023-28115Criticalknplabs/knp-snappy: PHAR deserialization allowing remote code execution CVE-2023-28108Highpimcore/pimcore: Improper quoting of columns when calling methods "getByUuid" & "exists" on UUID Model CVE-2023-28106Mediumpimcore/pimcore: Cross-site Scripting (XSS) in UrlSlug Data type CVE-2023-1463Mediumnilsteampassnet/teampass: Improper Authorization in nilsteampassnet/teampass GHSA-2XPM-CMVW-3JCCMediumpimcore/pimcore: Reflected XSS in Application Logger module CVE-2023-1429Mediumpimcore/pimcore: Cross-site Scripting (XSS) in Document Types

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo