Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2024-34104Highmagento/community-edition: Magento Open Source Improper Authorization vulnerabilityCVE-2024-37297Mediumwoocommerce/woocommerce: WooCommerce has a Cross-Site Scripting (XSS) Vulnerability in checkout & registration formsCVE-2024-35241Highcomposer/composer: Composer has a command injection via malicious git branch nameCVE-2024-35242Highcomposer/composer: Composer has multiple command injections via malicious git/hg branch namesCVE-2024-36528Highnukeviet/nukeviet: nukeviet Deserialization of Untrusted Data vulnerabilityGHSA-RCM4-JV5G-WCCMHighzfr/zfr-oauth2-server-module: zfr authentication adapter did not verify validity of tokensGHSA-3X57-M5P4-RGH4Highzendframework/zendopenid: ZendOpenID potential security issue in login mechanismGHSA-6FQW-J3VM-7F66Criticalzendframework/zendframework1: Zendframework1 Potential SQL injection in ORDER and GROUP functionsGHSA-848F-MPH5-9PM9Highzendframework/zendframework1: Zendframework Potential Information Disclosure and Insufficient Entropy vulnerabilityGHSA-8XHV-GQM4-3W99Highzendframework/zendframework1: ZendFramework1 Potential Insufficient Entropy VulnerabilityGHSA-V42G-7Q2X-CW32Criticalzendframework/zendframework1: Zendframework1 potential SQL injection vector using null byte for PDO (MsSql, SQLite)GHSA-MG4X-PRH7-G4MXHighzendframework/zend-captcha: Zend-Captcha Information Disclosure and Insufficient Entropy vulnerabilityGHSA-2X36-QHX3-7M5FCriticalzendframework/zendframework1: ZendFramework1 Potential SQL injection in the ORDER implementation of Zend_Db_SelectGHSA-9V78-H226-2RMQHighzendframework/zendframework1: Zendframework potential security issue in login mechanismGHSA-X86X-QHF8-F37WCriticalwilldurand/js-translation-bundle: willdurand/js-translation-bundle potential path traversal attack and remote code injectionGHSA-97H7-MF38-G9MFHighvrana/adminer: Adminer file disclosure vulnerabilityGHSA-78HM-5HJW-58MHMediumua-parser/uap-php: ua-parser/uap-php ReDoS vulnerabilityGHSA-QG7M-MWXM-J3H7Mediumzendframework/zend-developer-tools: Zend-developer-tools information disclosure vulnerabilityGHSA-4VF6-MQ7W-3HP6Mediumzendframework/zendframework1: Zend_Filter_StripTags vulnerable to Cross-site Scripting when comments allowedGHSA-FQ4P-86HH-42V9Mediumzendframework/zend-diactoros: Zend-Diactoros URL Rewrite vulnerabilityGHSA-6V7P-5QCQ-268CHighzendframework/zend-navigation: Zend-Navigation vulnerable to Cross-site ScriptingGHSA-JMMP-VH96-78RMHighzendframework/zend-feed: Zend-Feed URL Rewrite vulnerabilityGHSA-4V57-PWVF-X35JMediumzendframework/zendframework1: Zendframework potential Cross-site Scripting vector in `Zend_Service_ReCaptcha_MailHide`GHSA-GVPP-6JRJ-5PQCMediumzendframework/zend-form: Zend-Form vulnerable to Cross-site ScriptingGHSA-VVM3-RV48-J3G5Mediumzendframework/zendframework1: Zendframework Potential XSS or HTML Injection vector in Zend_Json

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo