Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2022-37721Criticalpyrocms/pyrocms: PyroCMS vulnerable to stored Cross Site ScriptingCVE-2022-43984Mediumspatie/browsershot: Browsershot version 3.57.3 vulnerable to improper input validationCVE-2022-41705Criticalbadaso/core: Badaso vulnerable to Remote Code Execution (RCE)CVE-2022-45149Mediummoodle/moodle: Cross-Site Request Forgery in MoodleCVE-2022-45150Mediummoodle/moodle: Moodle reflected cross-site scripting vulnerability in policy toolCVE-2022-45151Mediummoodle/moodle: Moodle stored-XSS vulnerability in some "social" user profile fieldsCVE-2022-42095Mediumbackdrop/backdrop: Cross-site Scripting in Backdrop CMSCVE-2022-42094Mediumbackdrop/backdrop: Cross-site Scripting in Backdrop CMSCVE-2022-42097Mediumbackdrop/backdrop: Cross-site Scripting in Backdrop CMSCVE-2022-33012Highmicroweber/microweber: Account Takeover Through Password Reset PoisoningCVE-2022-38145Mediumsilverstripe/versioned-admin: Stored XSS in Compare ModeCVE-2022-38148Highsilverstripe/framework: Blind SQL Injection via GridFieldSortableHeaderCVE-2022-38462Mediumsilverstripe/framework: Reflected XSS in querystring parametersCVE-2022-37429Mediumsilverstripe/framework: Stored XSS using HTMLEditorCVE-2022-37430Mediumsilverstripe/framework: Stored XSS using uppercase characters in HTMLEditorCVE-2022-37421Mediumsilverstripe/cms: Silverstipe CMS Stored XSS in custom meta tagsCVE-2022-38724Mediumsilverstripe/assets: Silverstripe XSS in shortcodesCVE-2022-38147Mediumsilverstripe/assets: XSS via uploaded gpx fileCVE-2022-38146Mediumsilverstripe/admin: URL XSS vulnerability due to outdated jquery in CMSCVE-2022-41938Criticalflarum/core: Cross site scripting vulnerability with discussion titlesCVE-2022-41922Highyiisoft/yii: Prevent RCE when deserializing untrusted user inputCVE-2022-42096Mediumbackdrop/backdrop: Cross-site Scripting in Backdrop CMSCVE-2022-4093Criticaldolibarr/dolibarr: SQL injection in DolibarrCVE-2022-3562Mediumlibrenms/librenms: Cross-site Scripting in librenms/librenmsCVE-2022-3516Mediumlibrenms/librenms: Cross-site Scripting in librenms/librenms

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo