Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-43372Highezsystems/ezplatform-richtext: Persistent Cross-site Scripting in eZ Platform Rich Text Field Type CVE-2024-43369Highibexa/fieldtype-richtext: Persistent Cross-site Scripting in Ibexa RichText Field Type CVE-2024-39415Mediummagento/project-community-edition: Magento Improper Authorization Leading to Security feature bypass CVE-2024-39410Mediummagento/community-edition: Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability CVE-2024-39408Mediummagento/community-edition: Magento Open Source Cross-Site Request Forgery vulnerability CVE-2024-39418Mediummagento/project-community-edition: Magento Improper Authorization vulnerability CVE-2024-39411Mediummagento/project-community-edition: Magento Improper Authorization leads to security feature bypass CVE-2024-39419Mediummagento/project-community-edition: Magento Improper Access Control Leads to Privilege escalation CVE-2024-39412Mediummagento/community-edition: Magento Open Source Improper Authorization vulnerability CVE-2024-39416Mediummagento/project-community-edition: Magento Improper Authorization leads to Security feature bypass CVE-2024-39409Mediummagento/community-edition: Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability CVE-2024-39414Mediummagento/project-community-edition: Magento Improper Access Control Leads to Privilege escalation CVE-2024-39417Mediummagento/project-community-edition: Magento Improper Authorization leads to Security feature bypass CVE-2024-39413Mediummagento/project-community-edition: Magento Improper Authorization vulnerability CVE-2024-39406Mediummagento/community-edition: Magento Open Source Path Traversal vulnerability CVE-2024-39407Mediummagento/project-community-edition: Magento Improper Authorization vulnerability CVE-2024-39402Highmagento/project-community-edition: Magento OS Command ('OS Command Injection') vulnerability CVE-2024-39404Mediummagento/project-community-edition: Magento Improper Authorization vulnerability CVE-2024-39405Mediummagento/project-community-edition: Magento Improper Authorization vulnerability CVE-2024-39403Highmagento/project-community-edition: Magento Stored Cross-Site Scripting (XSS) vulnerability CVE-2024-39398Highmagento/project-community-edition: Magento does not properly restrict excessive authentication attempts CVE-2024-39401Highmagento/project-community-edition: Magento OS Command ('OS Command Injection') vulnerability CVE-2024-39400Highmagento/project-community-edition: Magento DOM-based Cross-Site Scripting (XSS) vulnerability CVE-2024-39399Highmagento/project-community-edition: Magento Path Traversal vulnerability CVE-2024-42485Highpxlrbt/filament-excel: Filament Excel Vulnerable to Path Traversal Attack on Export Download Endpoint

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo