Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2022-46170Highcodeigniter4/framework: CodeIgniter4 Potential Session Handlers Vulnerability CVE-2022-23556Highcodeigniter4/framework: CodeIgniter4 allows spoofing of IP address when using proxy CVE-2022-4647Mediummicroweber/microweber: Microweber vulnerable to Stored Cross-Site Scripting CVE-2022-4617Mediummicroweber/microweber: Microweber vulnerable to Reflected Cross-site Scripting CVE-2022-42949Mediumsilverstripe/subsites: SilverStripe Subsite weakens file permissions CVE-2021-4262Criticalmgallegos/laravel-jqgrid: laravel-jqgrid vulnerable to SQL Injection CVE-2021-36572Mediumfeehi/feehicms: FeehiCMS Cross Site Scripting vulnerability CVE-2021-36573Mediumfeehi/feehicms: FeehiCMS Unrestricted Upload vulnerability CVE-2022-40002Mediumfeehi/feehicms: FeehiCMS Cross Site Scripting vulnerability CVE-2022-40373Mediumfeehi/feehicms: FeehiCMS Cross Site Scripting vulnerability CVE-2022-40001Mediumfeehi/feehicms: FeehiCMS Cross Site Scripting vulnerability CVE-2022-40000Mediumfeehi/feehicms: FeehiCMS Cross Site Scripting vulnerability CVE-2020-20589Mediumfeehi/feehicms: FeehiCMS vulnerable to Cross Site Scripting CVE-2020-36607Mediumfeehi/feehicms: FeehiCMS Cross Site Scripting vulnerability CVE-2022-4524Mediumroots/soil: Roots Soil plugin vulnerable to Cross-site Scripting CVE-2022-47408Criticalfixpunkt/fp-newsletter: Multiple vulnerabilities in extension "Newsletter subscriber management" (fp_newsletter)CVE-2022-47407Mediumfixpunkt/fp-masterquiz: TYPO3-EXT-SA-2022-018: Multiple vulnerabilities in extension "Master-Quiz" (fp_masterquiz)CVE-2022-47406Criticaltypo3/cms: TYPO3 vulnerable to Insufficient Session Expiration CVE-2022-47410Highfixpunkt/fp-newsletter: "Newsletter subscriber management" (fp_newsletter) TYPO3 extension leaks subscriber data CVE-2022-47411Highfixpunkt/fp-newsletter: "Newsletter subscriber management" (fp_newsletter) TYPO3 extension leaks subscriber data CVE-2022-23504Mediumtypo3/cms-core: TYPO3 CMS vulnerable to Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration CVE-2022-23503Hightypo3/cms-core: TYPO3 CMS vulnerable to Arbitrary Code Execution via Form Framework CVE-2022-23502Mediumtypo3/cms-core: TYPO3 CMS vulnerable to Insufficient Session Expiration after Password Reset CVE-2022-23501Mediumtypo3/cms-core: TYPO3 CMS vulnerable to Weak Authentication in Frontend Login CVE-2022-23500Mediumtypo3/cms-core: TYPO3 CMS vulnerable to Denial of Service in Page Error Handling

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo