Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2022-3975Mediumnukeviet/nukeviet: NukeView CMS vulnerable to Cross-site ScriptingGHSA-99R3-XMMQ-7Q7GCriticalezsystems/ezpublish-kernel: eZ Platform users with the Company admin role can assign any role to any userGHSA-8H83-CHH2-FCHPCriticalezsystems/ezplatform-kernel: eZ Platform users with the Company admin role can assign any role to any userGHSA-446Q-XXG5-3VHHCriticalezsystems/repository-forms: eZ Platform users with the Company admin role can assign any role to any userGHSA-PCPM-VC4V-CMVXCriticalezsystems/ezplatform-admin-ui: eZ Platform users with the Company admin role can assign any role to any userGHSA-G6JC-XRC3-4WWQCriticalibexa/admin-ui: Ibexa DXP users with the Company admin role can assign any role to any userGHSA-394J-X37R-2Q27Criticalibexa/core: Ibexa DXP users with the Company admin role can assign any role to any userGHSA-7644-CXP8-H23RCriticalibexa/admin-ui: ibexa/admin-ui vulnerable to Cross-site Scripting in content type name/shortnameCVE-2022-41876Highezsystems/ezplatform-graphql: ezplatform-graphql GraphQL queries can expose password hashesGHSA-58H5-H554-429QCriticalezsystems/ezplatform-admin-ui: ezplatform-admin-ui vulnerable to Cross-Site Scripting (XSS) GHSA-3P7G-WRGG-WQ45Criticalibexa/graphql: GraphQL queries can expose password hashesCVE-2022-43320Mediumfeehi/cms: FeehiCMS is vulnerable to Cross-Site Scripting (XSS)CVE-2022-43121Mediumintelliants/subrion: Subrion CMS is vulnerable to Cross-Site Scripting (XSS)CVE-2022-43120Mediumintelliants/subrion: Subrion CMS is vulnerable to Cross-Site Scripting (XSS)CVE-2022-3869Mediumfroxlor/froxlor: Froxlor vulnerable to code injectionCVE-2022-3721Mediumfroxlor/froxlor: Froxlor vulnerable to Code InjectionCVE-2021-37823Mediumopencart/opencart: OpenCart SQL injection vulnerabilityCVE-2022-44543Mediumin2code/femanager: TYPO3 Extension femanager vulnerable to Broken Access ControlCVE-2020-36608Mediumtribalsystems/zenario: Tribal Systems Zenario CMS vulnerable to Cross-site ScriptingCVE-2022-3827Criticalcentreon/centreon: Centreon vulnerable to SQL InjectionCVE-2022-3788Mediumtobiasbg/tablepress: TablePress Plugin vulnerable to Cross-site ScriptingCVE-2022-39369Highapereo/phpcas: phpCAS vulnerable to Service Hostname Discovery ExploitationCVE-2022-40488Mediumprocesswire/processwire: ProcessWire vulnerable to Cross-Site Request ForgeryCVE-2022-40487Mediumprocesswire/processwire: ProcessWire vulnerable to Cross-site ScriptingCVE-2022-3771Criticalnoumo/easyii: easyii CMS's File Upload Management vulnerable to unrestricted upload

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo