Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-7512Lowconcrete5/concrete5: Concrete CMS vulnerable to Stored Cross-site Scripting CVE-2024-4350Mediumconcrete5/concrete5: Concrete CMS Stored Cross-site Scripting vulnerability CVE-2024-7394Mediumconcrete5/concrete5: Concrete CMS Stored XSS in getAttributeSetName CVE-2024-42357Mediumshopware/core: Shopware vulnerable to blind SQL-injection in DAL aggregations CVE-2024-42356Highshopware/core: Shopware vulnerable to Server Side Template Injection in Twig using Context functions CVE-2024-42355Highshopware/core: Shopware vulnerable to Server Side Template Injection in Twig using deprecation silence tag CVE-2024-42354Mediumshopware/core: Shopware vulnerable to Improper Access Control with ManyToMany associations in store-api CVE-2024-40101Mediummicroweber/microweber: Microweber Reflected Cross-site scripting (XSS) vulnerability CVE-2024-41381Mediummicroweber/microweber: Microweber Cross Site Scripting (XSS) vulnerability CVE-2024-41380Mediummicroweber/microweber: Microweber Cross Site Scripting (XSS) vulnerability CVE-2024-41811Lowipl/web: ipl/web's `ipl\Web\Common\CsrfCounterMeasure` is susceptible to CSRF CVE-2024-4353Mediumconcrete5/concrete5: Concrete CMS vulnerable to Stored Cross-site Scripting GHSA-GC5H-6JX9-Q2QHMediumezsystems/ezplatform-admin-ui: eZ Platform Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget CVE-2024-39318Mediumibexa/admin-ui: Ibexa Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget CVE-2024-7300Mediumbolt/bolt: Bolt CMS Cross-site Scripting vulnerability CVE-2024-38909Highstudio-42/elfinder: Studio 42 elFinder vulnerable to Incorrect Access Control CVE-2024-41109Mediumpimcore/admin-ui-classic-bundle: Pimcore vulnerable to disclosure of system and database information behind /admin firewall CVE-2024-41676Mediumopenmage/magento-lts: Magento LTS vulnerable to stored Cross-site Scripting (XSS) in admin system configs CVE-2024-38529Criticaladmidio/admidio: Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment CVE-2024-37906Criticaladmidio/admidio: Admidio has Blind SQL Injection in ecard_send.php CVE-2024-41637Criticalbillz/raspap-webgui: RaspAP allows an attacker to escalate privileges CVE-2024-41375Highicecoder/icecoder: ICEcoder vulnerable to Cross Site Scripting CVE-2024-41374Highicecoder/icecoder: ICEcoder vulnerable to Cross Site Scripting CVE-2024-41373Mediumicecoder/icecoder: ICEcoder Path Traversal vulnerability CVE-2024-47069Mediumoveleon/contao-cookiebar: Reflected Cross Site-Scripting (XSS) in Oveleon Cookiebar

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.