Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2022-2925Mediumappwrite/server-ce: Appwrite Vulnerable to Cross-site ScriptingCVE-2022-36376Criticalrankmath/seo-by-rank-math: Rank Math SEO plugin vulnerable to Server-Side Request ForgeryCVE-2022-2714Highfrancoisjacquet/rosariosis: RosarioSIS before 10.1 vulnerable to Improper Handling of Length Parameter InconsistencyCVE-2022-34867Mediumlibreform/libreform: Unauthenticated Sensitive Information Disclosure vulnerabilityCVE-2020-21516Criticalfeehi/cms: FeehiCMS has an arbitrary file upload vulnerabilityCVE-2022-3072Mediumfrancoisjacquet/rosariosis: francoisjacquet/rosariosis vulnerable to Cross-Site Scripting (XSS)CVE-2022-35933Mediumprestashop/productcomments: PrestaShop Product Comments Cross-site Scripting vulnerabilityCVE-2022-36745Mediumlibrenms/librenms: LibreNMS vulnerable to Cross-Site Scripting (XSS)CVE-2022-36746Mediumlibrenms/librenms: LibreNMS vulnerable to Cross-Site Scripting (XSS)GHSA-RV3R-VQJJ-8C76Highgetkirby/cms: Cross-site scripting from content entered in the tags and multiselect fieldsCVE-2022-3035Mediumsnipe/snipe-it: snipe-it vulnerable to cross-site scripting (XSS)CVE-2022-36573Mediumpagekit/pagekit: Pagekit CMS cross-site scripting in Markdown text box where articles are editedCVE-2022-37059Mediumintelliants/subrion: Subrion CMS 4.2.1 vulnerable to cross-site scripting in admin panelCVE-2022-36037Mediumgetkirby/cms: Cross-site scripting from dynamic options in the multiselect fieldCVE-2022-3017Mediumfroxlor/froxlor: Froxlor vulnerable to Cross-Site Request Forgery (CSRF)CVE-2022-2997Mediumsnipe/snipe-it: Insufficient Session Expiration in snipe/snipe-it CVE-2022-38080Mediumexceedone/exment: exceedone/exment and exceedone/laravel-admin Cross-site Scripting vulnerabilityCVE-2022-37333Highexceedone/exment: exceedone/exment and exceedone/laravel-admin SQL Injection vulnerabilityCVE-2018-14520Mediumgetkirby/cms: Kirby CMS 2.5.12 Cross-site ScriptingCVE-2018-14519Mediumgetkirby/cms: Kirby CMS 2.5.12 Cross-site Request ForgeryCVE-2022-2796Mediumpimcore/pimcore: Pimcore Cross-site Scripting (XSS)CVE-2022-2927Highnotrinos/notrinos-erp: Missing password strength check in notrinos/notrinos-erpCVE-2022-1340Mediumyetiforce/yetiforce-crm: Cross site scripting in yetiforce/yetiforce-crmCVE-2022-2890Mediumyetiforce/yetiforce-crm: Cross site scripting in yetiforce/yetiforce-crmCVE-2022-2921Highnotrinos/notrinos-erp: Exposure of password hashes in notrinos/notrinos-erp

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo