Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2021-3841Mediumsylius/sylius: Cross site scripting in sylius/sylius CVE-2021-3902Criticaldompdf/dompdf: Improper Restriction of XML External Entity Reference in dompdf/dompdf CVE-2021-3838Criticaldompdf/dompdf: Deserialization of Untrusted Data in dompdf/dompdf CVE-2024-52306Highbackpack/filemanager: FileManager Deserialization of Untrusted Data vulnerability CVE-2024-52305Mediumunopim/unopim: UnoPim Stored XSS : Cookie hijacking through Create User function CVE-2024-51996Highsymfony/security-http: Symfony has an Authentication Bypass via RememberMe CVE-2024-48900Mediummoodle/moodle: Moodle IDOR when accessing list of badge recipients CVE-2024-52293Highcraftcms/cms: Craft CMS vulnerable to Potential Remote Code Execution via missing path normalization & Twig SSTI CVE-2024-52292Highcraftcms/cms: Craft CMS Arbitrary System File Read CVE-2024-52291Highcraftcms/cms: Local File System Validation Bypass Leading to File Overwrite, Sensitive File Access, and Potential Code Execution CVE-2024-52301Highlaravel/framework: Laravel environment manipulation via query string CVE-2024-51093Highsnipe/snipe-it: Cross Site Scripting vulnerability in Snipe-IT CVE-2024-51992Mediumorchid/platform: Orchid Platform has Method Exposure Vulnerability in Modals CVE-2024-43439Mediummoodle/moodle: Moodle reflected XSS via H5P error message CVE-2024-43437Lowmoodle/moodle: Moodle Cross-site Scripting vulnerability CVE-2024-43433Lowmoodle/moodle: Moodle's user/power level management inconsistent with suspended users CVE-2024-43429Lowmoodle/moodle: Moodle has user information visibility control issues in gradebook reports CVE-2024-43432Lowmoodle/moodle: Moodle authorization headers preserved between "emulated redirects"CVE-2024-43427Lowmoodle/moodle: Moodle admin presets export tool includes some secrets that should not be exported CVE-2024-43430Lowmoodle/moodle: Moodle has insufficient access control CVE-2024-43435Lowmoodle/moodle: Moodle has insufficient capability checks CVE-2024-51434Mediumfroala-editor: Froala WYSIWYG editor allows cross-site scripting (XSS)CVE-2015-3542Highphpoffice/phpexcel: PHPExcel XXE Vulnerability CVE-2024-51758Lowfilament/actions: Filament has exported files stored in default (`public`) filesystem if not reconfigured CVE-2024-43431Mediummoodle/moodle: Moodle's IDOR in badges allows deletion of arbitrary badges

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.