Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-62F6-H68R-3JPWMediumzendframework/zendframework: Zendframework session validation vulnerability GHSA-JQ87-2WXP-8349Highzendframework/zendframework: ZendFramework Route Parameter Injection Via Query String in `Zend\Mvc`GHSA-8Q77-CV62-JJ38Mediumzendframework/zendframework: Zendframework has potential Cross-site Scripting vector in multiple view helpers GHSA-XFFP-6W68-4775Highzendframework/zendframework: Zendframework Remote Address Spoofing Vector in `Zend\Http\PhpEnvironment\RemoteAddress`GHSA-F3WF-Q4FJ-3GXFMediumtypo3/cms: TYPO3 Denial of Service in Online Media Asset Handling GHSA-6487-3QVG-8PX9Mediumtypo3/cms: TYPO3 Information Disclosure in Install Tool GHSA-F777-F784-36GMHightypo3/cms: TYPO3 Security Misconfiguration in Install Tool Cookie GHSA-2RCW-9HRM-8Q7QMediumtypo3/cms: TYPO3 Cross-Site Scripting in Frontend User Login GHSA-7Q33-HXWJ-7P8VMediumtypo3/cms: TYPO3 Cross-Site Scripting in Backend Modal Component GHSA-8M6J-P5JV-V69WMediumtypo3/cms: TYPO3 Cross-Site Scripting in Online Media Asset Rendering CVE-2024-37160Mediumgetformwork/formwork: Cross-site scripting (XSS) vulnerability in Description metadata GHSA-8H4M-R4WM-XJ7RHightypo3/cms: TYPO3 Arbitrary Code Execution via File List Module GHSA-G585-CRJF-VHWQHightypo3/cms: TYPO3 Denial of Service in Frontend Record Registration GHSA-F624-8HFQ-5FH3Mediumtypo3/cms: TYPO3 Information Disclosure of Installed Extensions GHSA-V8M4-3W37-GHXXMediumtypo3/cms: TYPO3 Cross-Site Scripting in Form Framework validation handling GHSA-4H5C-5G25-V7FHMediumtypo3/cms: TYPO3 Cross-Site Scripting in Form Framework GHSA-C5MJ-39CF-3PP5Hightypo3/cms: TYPO3 Security Misconfiguration for Backend User Accounts GHSA-XGMX-J3HV-JH9XMediumtypo3/cms: TYPO3 Cross-Site Scripting in Link Handling GHSA-772M-43F3-HMF8Mediumtypo3/cms: TYPO3 Broken Access Control in Localization Handling GHSA-G7HW-JH4P-75WRMediumtypo3/cms: TYPO3 Cross-Site Scripting in Filelist Module GHSA-85CH-44W7-RF32Mediumtypo3/cms: TYPO3 Cross-Site Scripting in Fluid ViewHelpers GHSA-HH95-5XM5-V8V7Hightypo3/cms: TYPO3 CMS Possible Insecure Deserialization in Extbase Request Handling CVE-2024-37156Mediumsulu/form-bundle: TokenController formName not sanitized in hidden input CVE-2024-5657Lowborn05/craft-twofactorauthentication: Password hash exposed in CraftCMS two factor authentication plugin CVE-2024-5658Mediumborn05/craft-twofactorauthentication: Improper Authentication in CraftCMS two factor authentication plugin

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo