composio-core vulnerabilities
CVEs whose affected-version data names the composio-core package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
5 CVEsRSS
CVE-2024-8952Medium· 6.8composio Server-Side Request Forgery (SSRF) vulnerability
composio Server-Side Request Forgery (SSRF) vulnerability
▾ Sunlitcomposio-core · composio-coreEPSS 0.72%via OSV
CVE-2024-8953High· 7.2Composio Eval Injection Vulnerability
Composio Eval Injection Vulnerability
▾ Twilightcomposio-core · composio-coreEPSS 1.2%via OSV
CVE-2024-8955Medium· 6.8composio allows Server-Side Request Forgery (SSRF) in BROWSERTOOL
composio allows Server-Side Request Forgery (SSRF) in BROWSERTOOL
▾ Sunlitcomposio-core · composio-coreEPSS 0.73%via OSV
CVE-2024-8864Medium· 5.5Composio Code Injection Vulnerability
Composio Code Injection Vulnerability
▾ Sunlitcomposio-core · composio-coreEPSS 0.83%via OSV
CVE-2024-8865Low· 3.5Composio Path Traversal vulnerability
Composio Path Traversal vulnerability
▾ Sunlitcomposio-core · composio-coreEPSS 0.87%via OSV