Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2021-36403Mediummoodle/moodle: Moodle has a Hidden Functionality vulnerabilityCVE-2021-36401Mediummoodle/moodle: Moodle vulnerable to Stored Cross-site ScriptingCVE-2021-36400Mediummoodle/moodle: Moodle has Incorrect Default PermissionsCVE-2021-36392Criticalmoodle/moodle: Moodle SQL Injection vulnerabilityCVE-2021-36393Criticalmoodle/moodle: Moodle SQL Injection vulnerabilityCVE-2023-24776Criticalfunadmin/funadmin: Remote code execution in FunadminCVE-2021-36396Highmoodle/moodle: Moodle vulnerable to Server-Side Request ForgeryCVE-2021-36394Criticalmoodle/moodle: Moodle Session Fixation vulnerabilityCVE-2021-36395Highmoodle/moodle: Moodle vulnerable to Uncontrolled Resource ConsumptionCVE-2023-1197Mediumuvdesk/community-skeleton: uvdesk/community-skeleton vulnerable to Stored Cross-site ScriptingCVE-2023-0734Mediumwallabag/wallabag: Wallabag Improper Authorization vulnerabilityCVE-2023-23927Mediumcraftcms/cms: Craft CMS Stored Cross-site Scripting Injection VulnerabilityCVE-2023-27560Highphpseclib/phpseclib: phpseclib Infinite Loop vulnerabilityCVE-2023-1160Mediumcockpit-hq/cockpit: Cockpit Uses Platform-Dependent Third Party ComponentsCVE-2023-1116Mediumpimcore/pimcore: Pimcore vulnerable to Cross Site Scripting in Email BlacklistCVE-2023-1117Mediumpimcore/pimcore: Pimcore vulnerable to Cross Site Scripting in image/video thumbnail configCVE-2023-1115Mediumpimcore/pimcore: Pimcore vulnerable to Cross Site Scripting in Documents Link EditableCVE-2023-25575Highapi-platform/core: api-platform/core's secured properties may be accessible within collectionsCVE-2023-1081Mediummicroweber/microweber: Microweber Cross-site Scripting vulnerabilityCVE-2023-24249Highencore/laravel-admin: laravel-admin has Arbitrary File Upload vulnerabilityCVE-2023-1070Highnilsteampassnet/teampass: TeamPass External Control of File Name or Path vulnerabilityCVE-2023-1067Mediumpimcore/pimcore: Pimcore vulnerable to Cross-site ScriptingCVE-2023-26091Mediumfrappant/frp-form-answers: frp_form_answers allows Cross-site ScriptingCVE-2023-1033Highfroxlor/froxlor: Froxlor Cross-Site Request Forgery vulnerabilityCVE-2023-0994Highfrancoisjacquet/rosariosis: RosarioSIS Improper Access Control vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo