Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2023-22476Mediummantisbt/mantisbt: MantisBT may expose private issues' summaries to unauthorized users CVE-2017-20178Highcodiad/codiad: Codiad information disclosure vulnerability CVE-2021-32856Mediummicroweber/microweber: Microweber Cross-site Scripting vulnerability CVE-2023-0914Mediumpixelfed/pixelfed: Pixelfed may allow unauthorized actor to view private posts CVE-2023-0901Mediumpixelfed/pixelfed: Pixelfed allows user enumeration via reset password functionality CVE-2023-23923Highmoodle/moodle: Moodle Improper Access Control vulnerability CVE-2023-23921Mediummoodle/moodle: Moodle Cross-site Scripting vulnerability CVE-2023-23922Mediummoodle/moodle: Moodle Cross-site Scripting vulnerability CVE-2023-0877Highfroxlor/froxlor: Code Injection in froxlor/froxlor CVE-2023-0880Mediumthorsten/phpmyfaq: Misinterpretation of Input in thorsten/phpmyfaq CVE-2020-19825Criticalkimai/kimai: Cross-site Scripting in kimai/kimai GHSA-76R7-H46W-463RMediumpimcore/pimcore: Cross Site Scripting (XSS) in Model\DataObject\Data\UrlSlug CVE-2023-0827Mediumpimcore/pimcore: Cross-site Scripting in pimcore CVE-2022-4905Mediumwpcloud/wp-stateless: Cross-site Scripting in UDX Stateless Media Plugin CVE-2023-25240Highpimcore/pimcore: SameSite Attribute vulnerability in pimCore CVE-2023-25727Mediumphpmyadmin/phpmyadmin: Cross-site Scripting vulnerability in drag-and-drop upload of phpMyAdmin CVE-2023-0789Criticalthorsten/phpmyfaq: Command Injection in thorsten/phpmyfaq CVE-2023-0791Mediumthorsten/phpmyfaq: Cross-site Scripting in thorsten/phpmyfaq CVE-2023-0787Mediumthorsten/phpmyfaq: Cross-site Scripting in thorsten/phpmyfaq CVE-2023-0790Highthorsten/phpmyfaq: Uncaught Exception in thorsten/phpmyfaq CVE-2023-0792Mediumthorsten/phpmyfaq: Code Injection in thorsten/phpmyfaq CVE-2023-0786Mediumthorsten/phpmyfaq: Cross-site Scripting in thorsten/phpmyfaq CVE-2023-0788Criticalthorsten/phpmyfaq: Code Injection in thorsten/phpmyfaq CVE-2023-0794Mediumthorsten/phpmyfaq: Cross-site Scripting in thorsten/phpmyfaq CVE-2023-0793Highthorsten/phpmyfaq: Weak Password Requirements in thorsten/phpmyfaq

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo