Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-48224Highfunadmin/funadmin: SQL injection in funadmin CVE-2024-48223Highfunadmin/funadmin: SQL injection in funadmin CVE-2024-48218Highfunadmin/funadmin: SQL injection in funadmin CVE-2024-48226Highfunadmin/funadmin: SQL injection in funadmin CVE-2024-49762Mediumpterodactyl/panel: Pterodactyl Panel has plain-text logging of user passwords when two-factor authentication is disabled CVE-2024-48514Highmaestroerror/php-heic-to-jpg: Remote code execution in php-heic-to-jpg CVE-2024-47173Mediumaimeos/ai-admin-graphql: ai-admin-graphql has a Denial of service vulnerability in SaaS and marketplace setups CVE-2024-46998Mediumbaserproject/basercms: baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature CVE-2024-46996Mediumbaserproject/basercms: baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Feature CVE-2024-46995Mediumbaserproject/basercms: baserCMS has a Cross-site Scripting (XSS) Vulnerability in HTTP 400 Bad Request CVE-2024-46994Mediumbaserproject/basercms: baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts and Contents list Feature CVE-2024-48231Highfunadmin/funadmin: SQL injection in funadmin CVE-2024-46212Mediumredaxo/source: Path traversal in redaxo CVE-2024-47836Lowadmidio/admidio: Admidio Vulnerable to HTML Injection In The Messages Section CVE-2024-48987Highsnipe/snipe-it: Snipe-IT remote code execution CVE-2024-45134Mediummagento/community-edition: Magento Open Source Information Exposure vulnerability CVE-2024-45132Highmagento/community-edition: Magento Open Source Improper Authorization vulnerability CVE-2024-45131Mediummagento/community-edition: Magento Open Source Improper Authorization vulnerability CVE-2024-45133Mediummagento/community-edition: Magento Open Source Information Exposure vulnerability CVE-2024-45149Lowmagento/community-edition: Magento Open Source Improper Access Control vulnerability CVE-2024-45135Mediummagento/community-edition: Magento Open Source Improper Access Control vulnerability CVE-2024-45127Mediummagento/community-edition: Magento Open Source stored Cross-Site Scripting (XSS) vulnerability CVE-2024-45123Mediummagento/community-edition: Magento Open Source reflected Cross-Site Scripting (XSS) vulnerability CVE-2024-45121Mediummagento/community-edition: Magento Open Source Improper Access Control vulnerability CVE-2024-45129Mediummagento/community-edition: Magento Open Source Improper Access Control vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo