Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-45691Mediummoodle/moodle: Moodle Lesson activity password bypass through PHP loose comparison CVE-2024-50803Mediumredaxo/source: Redaxo Core CMS Cross Site Scripting (XSS)CVE-2024-52600Mediumstatamic/cms: Statamic CMS has a Path Traversal in Asset Upload CVE-2024-48917Highphpoffice/phpspreadsheet: XXE in PHPSpreadsheet's XLSX reader CVE-2024-47873Highphpoffice/phpspreadsheet: XmlScanner bypass leads to XXE CVE-2024-48898Mediummoodle/moodle: moodle: Some users can delete audiences of other reports CVE-2024-48896Mediummoodle/moodle: Moodle leaks user names CVE-2024-48901Mediummoodle/moodle: moodle: IDOR when fetching report schedules CVE-2024-48897Mediummoodle/moodle: moodle: IDOR in edit/delete RSS feed CVE-2024-52526Highlibrenms/librenms: LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/services.inc.php CVE-2024-51092Criticallibrenms/librenms: LibreNMS has an Authenticated OS Command Injection CVE-2024-51497Highlibrenms/librenms: LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/print-customoid.php CVE-2024-51496Highlibrenms/librenms: LibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/html/pages/wireless.inc.php CVE-2024-51495Highlibrenms/librenms: LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/dev-overview-data.inc.php CVE-2024-51494Highlibrenms/librenms: LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.php CVE-2024-50355Highlibrenms/librenms: LibreNMS has a Persistent XSS from Insecure Input Sanitization Affects Multiple Endpoints CVE-2024-50352Highlibrenms/librenms: LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/overview/services.inc.php CVE-2024-50351Highlibrenms/librenms: LibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/functions.php CVE-2024-50350Highlibrenms/librenms: LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.php CVE-2024-49764Highlibrenms/librenms: LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/capture.inc.php CVE-2024-49759Highlibrenms/librenms: Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/edituser.inc.php CVE-2024-49758Mediumlibrenms/librenms: LibreNMS has a stored XSS in ExamplePlugin with Device's Notes CVE-2024-49754Highlibrenms/librenms: LibreNMS has a stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/api-access.inc.php CVE-2023-0737Mediumwallabag/wallabag: CSRF leading to delete account in wallabag/wallabag CVE-2021-3991Mediumdolibarr/dolibarr: Improper Authorization in dolibarr/dolibarr

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo