Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
GHSA-RRWM-8WQM-GWGVMediumpimcore/pimcore: Cross-site Scripting (XSS) - stored in Print DocumentsCVE-2023-28104Highsilverstripe/graphql: DDOS attack on graphql endpointsCVE-2023-27577Mediumflarum/core: Path Traversal Vulnerability in `LESS` Parser allows reading of sensitive server filesCVE-2023-25170Mediumprestashop/prestashop: Possible CSRF token fixationCVE-2023-27580Mediumcodeigniter4/shield: Password Shucking VulnerabilityCVE-2023-1367Highalextselegidis/easyappointments: Code Injection in alextselegidis/easyappointmentsCVE-2022-48365Highezsystems/ezpublish-kernel: Company admin role gives excessive privileges in eZ Platform IbexaCVE-2022-48367Criticalezsystems/ezpublish-kernel: Access control issue in ezsystems/ezpublish-kernelCVE-2022-48366Lowezsystems/ezplatform-kernel: Timing attack in eZ Platform IbexaCVE-2023-24774Criticalfunadmin/funadmin: Funadmin vulnerable to SQL injectionCVE-2023-1312Mediumpimcore/pimcore: pimcore is vulnerable to cross-site scriptingCVE-2023-1313Highcockpit-hq/cockpit: cockpit-hq/cockpit is vulnerable to unrestricted file uploads CVE-2023-1307Criticalfroxlor/froxlor: Froxlor is vulnerable to authentication bypassCVE-2023-1286Mediumpimcore/pimcore: Cross-site Scripting (XSS) in pimcore/pimcoreCVE-2023-24777Criticalfunadmin/funadmin: SQL Injection in FunadminCVE-2023-24782Criticalfunadmin/funadmin: SQL Injection in FunadminCVE-2023-24773Criticalfunadmin/funadmin: SQL Injection in FunadminCVE-2023-1269Criticalalextselegidis/easyappointments: Easy!Appointments uses hard-coded credentialsCVE-2023-24780Criticalfunadmin/funadmin: SQL Injection in FunadminCVE-2023-24775Criticalfunadmin/funadmin: SQL Injection in FunadminCVE-2023-24781Criticalfunadmin/funadmin: SQL Injection in FunadminCVE-2021-36398Mediummoodle/moodle: Moodle Cross-site Scripting vulnerabilityCVE-2021-36397Mediummoodle/moodle: Moodle has Incorrect Default PermissionsCVE-2021-36399Mediummoodle/moodle: Moodle Cross-site Scripting vulnerabilityCVE-2021-36402Mediummoodle/moodle: Moodle Improper Input Validation vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo