Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-45118Highmagento/community-edition: Magento Open Source Improper Access Control vulnerability CVE-2024-45130Mediummagento/community-edition: Magento Open Source Improper Access Control vulnerability CVE-2024-45122Mediummagento/community-edition: Magento Open Source Improper Access Control vulnerability CVE-2024-45125Mediummagento/community-edition: Magento Open Source Incorrect Authorization vulnerability CVE-2024-45128Mediummagento/community-edition: Magento Open Source Improper Authorization vulnerability CVE-2024-45124Mediummagento/community-edition: Magento Open Source Improper Access Control vulnerability CVE-2024-45120Mediummagento/community-edition: Magento Open Source Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability CVE-2024-45119Mediummagento/community-edition: Magento Open Source Server-Side Request Forgery (SSRF) vulnerability CVE-2024-45117Mediummagento/community-edition: Magento Open Source Improper Input Validation vulnerability CVE-2024-45116Mediummagento/community-edition: Magento Open Source Cross-Site Scripting (XSS) vulnerability CVE-2024-47823Highlivewire/livewire: Livewire Remote Code Execution on File Uploads CVE-2024-34537Lowtypo3/cms-backend: Denial of Service in TYPO3 Bookmark Toolbar CVE-2024-47780Lowtypo3/cms-backend: Information Disclosure in TYPO3 Page Tree CVE-2024-28709Mediumlimesurvey/limesurvey: LimeSurvey Cross Site Scripting vulnerability CVE-2024-45932Mediumkrayin/laravel-crm: Krayin CRM vulnerable to Cross Site Scripting (XSS) via the organization name CVE-2024-28710Mediumlimesurvey/limesurvey: LimeSurvey Cross Site Scripting vulnerability CVE-2024-45293Highphpoffice/phpspreadsheet: XXE in PHPSpreadsheet's XLSX reader CVE-2024-45292Mediumphpoffice/phpspreadsheet: PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via JavaScript hyperlinks CVE-2024-45291Mediumphpoffice/phpspreadsheet: PhpSpreadsheet allows absolute path traversal and Server-Side Request Forgery in HTML writer when embedding images is enabled CVE-2024-45290Highphpoffice/phpspreadsheet: PhpSpreadsheet allows absolute path traversal and Server-Side Request Forgery when opening XLSX file CVE-2024-47817Mediumlara-zeus/dynamic-dashboard: Lara-zeus Dynamic Dashboard and Artemis do not validate paragraph widget values which can be used for XSS CVE-2024-45060Mediumphpoffice/phpspreadsheet: PhpSpreadsheet has an Unauthenticated Cross-Site-Scripting (XSS) in sample file CVE-2024-47847Mediummediawiki/cargo: Mediawiki Cargo extension vulnerable to Cross-site Scripting CVE-2024-47913Mediummediawiki/abuse-filter: Improper permissions handling in MediaWiki AbuseFilter CVE-2024-47765Mediumdev-lancer/minecraft-motd-parser: Minecraft MOTD Parser's HtmlGenerator vulnerable to XSS

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo