Composer vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-34051Mediumdolibarr/dolibarr: Reflected Cross-Site Scripting (XSS) in Dolibarr GHSA-5J86-5XVG-7Q93Mediumtypo3/cms: TYPO3 Cross-Site Scripting (XSS) in form component GHSA-VGM8-R9GM-FW59Mediumtypo3/cms: TYPO3 Cross-Site Scripting in legacy form component GHSA-CG4M-QJJP-7497Mediumtypo3/cms: TYPO3 Cross-Site Scripting in link validator component GHSA-6FC6-CJ2J-H22XMediumtypo3/cms: TYPO3 Multiple Cross-Site Scripting vulnerabilities in frontend GHSA-9895-53FC-98V2Hightypo3/cms: TYPO3 SQL Injection in dbal GHSA-WH8Q-72CP-P5WFMediumtypo3/cms: Cross-Site Scripting in TYPO3 component Indexed Search GHSA-QRXH-46MR-PR7QMediumtypo3/cms: TYPO3 is susceptible to Cross-Site Flashing GHSA-5CXF-XX9J-54JCMediumtypo3/cms: Multiple Cross-Site Scripting vulnerabilities in TYPO3 backend CVE-2024-36119Lowstatamic/cms: Password confirmation stored in plain text via registration form in statamic/cms CVE-2024-4990Highyiisoft/yii2: Unsafe Reflection in base Component class in yiisoft/yii2 CVE-2024-32877Mediumyiisoft/yii2: Reflected Cross-site Scripting in yiisoft/yii2 Debug mode CVE-2024-34008Highmoodle/moodle: Moodle CSRF risk in analytics management of models CVE-2024-34005Highmoodle/moodle: Moodle Authenticated LFI risk in some misconfigured shared hosting environments CVE-2024-34004Mediummoodle/moodle: Moodle Authenticated LFI risk in some misconfigured shared hosting environments CVE-2024-34006Mediummoodle/moodle: Moodle Unsanitized HTML in site log for config_log_created CVE-2024-34002Highmoodle/moodle: Moodle Authenticated LFI risk in some misconfigured shared hosting environments CVE-2024-34003Mediummoodle/moodle: Moodle Authenticated LFI risk in some misconfigured shared hosting environments CVE-2024-34009Highmoodle/moodle: Moodle ReCAPTCHA can be bypassed on the login page CVE-2024-34007Mediummoodle/moodle: Moodle Logout CSRF in admin/tool/mfa/auth.php CVE-2024-34001Highmoodle/moodle: Moodle CSRF risk in admin preset tool management of presets CVE-2024-33999Highmoodle/moodle: Moodle Improper Input Validation CVE-2024-34000Mediummoodle/moodle: Moodle Cross-site Scripting (XSS)CVE-2024-33996Mediummoodle/moodle: Moodle broken access control when setting calendar event type CVE-2024-33998Mediummoodle/moodle: Moodle Cross-site Scripting (XSS)

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.