PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
composer/composer Composer has a command injection via malicious perforce repository High Risk 7.8 6 months ago 8 hours ago
composer/composer Composer: GHSA-gjfg-22fp-rrxx fix bypass via symlinked package bin path Medium Risk 6.1 1 month ago 1 month ago
composer/composer Composer has a command injection via malicious perforce reference High Risk 8.8 6 months ago 1 month ago
composer/composer Composer has multiple command injections via malicious git/hg branch names High Risk 8.8 2 years ago 1 month ago
composer/composer Composer code execution and possible privilege escalation via compromised InstalledVersions.php or installed.php High Risk 8.8 2 years ago 1 month ago
composer/composer Composer has a command injection via malicious git branch name High Risk 8.8 2 years ago 1 month ago
composer/composer Composer arbitrary command execution via a malicious package's Perforce source URL High Risk 8.0 1 month ago 1 month ago
composer/composer Composer: URL-embedded HTTP-Basic username leaks to verbose logs (GitHub PAT exposure) Medium Risk 4.7 3 months ago 3 months ago
composer/composer Composer: Path traversal in package bin field lets dependencies chmod arbitrary host files Medium Risk 6.1 3 months ago 3 months ago
composer/composer Github Actions issued GITHUB_TOKEN disclosure in GitHub Actions logs High Risk 7.5 5 months ago 3 months ago
composer/composer Composer: Arbitrary file write outside vendor via malicious transitive package name High Risk 7.0 3 months ago 3 months ago
composer/composer Improper escaping of command arguments on Windows leading to command injection High Risk 8.2 5 years ago 3 months ago
composer/composer Composer's missing argument delimiter can lead to code execution via VCS repository URLs or source download URLs on systems with Mercurial High Risk 8.8 5 years ago 3 months ago
composer/composer Composer is vulnerable to ANSI sequence injection Low Risk 3.0 10 months ago 9 months ago
composer/composer Composer Remote Code Execution vulnerability via web-accessible composer.phar High Risk 8.8 3 years ago 1 year ago
composer/composer Missing input validation can lead to command execution in composer High Risk 8.3 4 years ago 2 years ago
composer/composer Composer allows cache poisoning from other projects built on the same host High Risk 8.8 3 years ago 2 years ago
Data courtesy of OSV.dev
Page 1