Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2022-23499Mediumtypo3/html-sanitizer: TYPO3 HTML Sanitizer vulnerable to Cross-Site ScriptingCVE-2021-4244Mediumyikesinc/yikes-inc-easy-mailchimp-extender: yikes-inc-easy-mailchimp-extender Cross-site Scripting vulnerabilityCVE-2022-4408Mediumthorsten/phpmyfaq: phpMyFAQ vulnerable to Cross-site ScriptingCVE-2022-4407Mediumthorsten/phpmyfaq: phpMyFAQ vulnerable to Cross-site ScriptingCVE-2022-4409Highthorsten/phpmyfaq: phpMyFAQ has insecure HTTP cookiesCVE-2022-34297Mediumyiisoft/yii2-gii: Yii2 Gii Cross-site Scripting vulnerabilityCVE-2022-46157Highakeneo/pim-community-dev: Akeneo PIM Community Edition vulnerable to remote php code executionCVE-2022-23494Mediumtinymce: Cross-site scripting vulnerability in TinyMCE alertsCVE-2022-46158Mediumprestashop/prestashop: PrestaShop has potential Information exposure in the upload directoryCVE-2022-42486Mediumbaserproject/basercms: baserCMS vulnerable to stored Cross-site ScriptingCVE-2022-41994Mediumbaserproject/basercms: baserCMS vulnerable to stored Cross-site ScriptingCVE-2022-44289Hightopthink/framework: Thinkphp has a code logic errorCVE-2022-43556Mediumconcrete5/concrete5: Concrete CMS vulnerable to cross-site scripting in the text input fieldCVE-2022-37783Highcraftcms/cms: Craft CMS discloses password hashesGHSA-Q7QQ-9GX2-GGXVMediumphpxmlrpc/phpxmlrpc: phpxmlrpc vulnerable to argument injectionCVE-2022-40489Highthinkcmf/thinkcmf: ThinkCMF Cross Site Request Forgery (CSRF) vulnerabilityCVE-2022-40849Mediumthinkcmf/thinkcmf: ThinkCMF Stored Cross-Site Scripting (XSS)CVE-2022-44136Criticaltribalsystems/zenario: Zenario CMS is vulnerable to Remote Code Execution (RCE).CVE-2022-4231Mediumtribalsystems/zenario: Tribal Systems Zenario CMS vulnerable to Session FixationCVE-2022-39325Mediumbaserproject/basercms: baserproject/basercms vulnerable to cross-site scripting (XSS) vulnerability GHSA-3FGR-XJR6-XQM8Highphpxmlrpc/phpxmlrpc: code injection in phpxmlrpc/phpxmlrpcCVE-2022-45152Criticalmoodle/moodle: Moodle blind Server-Side Request Forgery (SSRF) vulnerability in LTI provider libraryCVE-2022-43983Mediumspatie/browsershot: Browsershot vulnerable to Cross-Site Scripting (XSS)CVE-2022-41706Highspatie/browsershot: Browsershot does not validate URL protocols passed to Browsershot URL methodCVE-2022-0698Mediummicroweber/microweber: Microweber vulnerable to cross-site scripting (XSS)

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo