Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2022-33910Mediummantisbt/mantisbt: MantisBT XSS through crafted SVG documents in file_download.php CVE-2022-2174Mediummicroweber/microweber: Cross-site Scripting in Microweber CVE-2022-31092Highpimcore/pimcore: Improper quoting of columns when using setOrderBy() or setGroupBy() on listing classes in Pimcore CVE-2022-31057Mediumshopware/shopware: Authenticated Stored Cross-site Scripting in Shopware CVE-2022-30874Mediumnukeviet/nukeviet: Cross-site Scripting in NukeViet CMS CVE-2021-41924Mediumkrayin/laravel-crm: Cross-site Scripting in krayin/laravel-crm CVE-2022-31091Highguzzlehttp/guzzle: Change in port should be considered a change in origin CVE-2022-31090Highguzzlehttp/guzzle: CURLOPT_HTTPAUTH option not cleared on change of origin CVE-2017-20057Mediumelefant/cms: Cross site scripting in Elefant CMS CVE-2017-20060Mediumelefant/cms: Cross site scripting in Elefant CMS CVE-2017-20062Highelefant/cms: Cross-Site Request Forgery in Elefant CMS CVE-2017-20058Mediumelefant/cms: Cross site scripting in Elefant CMS CVE-2017-20059Mediumelefant/cms: Cross site scripting in Elefant CMS CVE-2017-20064Highelefant/cms: Code injection in Elefant CMS CVE-2017-20061Mediumelefant/cms: Cross site scripting in Elefant CMS CVE-2017-20063Highelefant/cms: Unrestricted Upload of File with Dangerous Type in Elefant CMS CVE-2022-2130Mediummicroweber/microweber: Cross-site Scripting in Microweber CVE-2022-33156Mediumbrotkrueml/typo3-matomo-integration: brotkrueml/typo3-matomo-integration vulnerable to Cross-Site Scripting CVE-2022-33154Mediumbrotkrueml/schema: brotkrueml/schema fails to properly encode user input for output in HTML context, leading to XSS CVE-2022-31050Mediumtypo3/cms-core: Insufficient Session Expiration in TYPO3's Admin Tool CVE-2022-31049Mediumtypo3/cms-core: Cross-Site Scripting in TYPO3's Frontend Login Mailer CVE-2022-31048Mediumtypo3/cms-core: Cross-Site Scripting in TYPO3's Form Framework CVE-2022-31047Mediumtypo3/cms-core: Insertion of Sensitive Information into Log File in typo3/cms-core CVE-2022-31046Mediumtypo3/cms-core: Information Disclosure via Export Module CVE-2021-40616Mediumthinkcmf/thinkcmf: Incorrect Authorization in thinkcmf

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.