composio kayıtları
composio üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %22,2
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-918 Server-Side Request Forgery (SSRF)2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-304 Missing Critical Step in Authentication1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-627 Dynamic Variable Evaluation1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-8958İstismar yok | Unrestricted File Write and Read in composiohq/composiocomposio · composio · CWE-434 | Kritik9,8 | — | %1,4 | 20 Mar 2025 |
39İzleyin | CVE-2024-8953İstismar yok | Unsafe eval usage in composiohq/composiocomposio · composio · CWE-627 | Kritik9,8 | — | %1,2 | 20 Mar 2025 |
39İzleyin | CVE-2024-8954İstismar yok | Authentication Bypass in composiohq/composiocomposio · composio · CWE-304 | Kritik9,8 | — | %0,9 | 20 Mar 2025 |
30İzleyin | CVE-2025-56427İstismar yok | Directory Traversal vulnerability in ComposioHQ v.0.7.20 allows a remote attacker to obtain sensitive information via the _download_file_or_composio · composio · CWE-200 | Yüksek7,5 | — | %0,9 | 4 Ara 2025 |
30İzleyin | CVE-2024-8955İstismar yok | SSRF in composiohq/composiocomposio · composio · CWE-918 | Yüksek7,5 | — | %0,7 | 20 Mar 2025 |
30İzleyin | CVE-2024-8952İstismar yok | SSRF in composiohq/composiocomposio · composio · CWE-918 | Yüksek7,5 | — | %0,7 | 20 Mar 2025 |
25İzleyin | CVE-2024-53526İstismar yok | composio >=0.5.40 is vulnerable to Command Execution in composio_openai, composio_claude, and composio_julep via the handle_tool_calls functcomposio · composio · CWE-77 | Orta6,4 | — | %0,6 | 8 Oca 2025 |
20İzleyin | CVE-2024-8865İstismar yok | composiohq composio api.py path path traversalcomposio · composio · CWE-22 | Orta5,1 | — | %0,9 | 14 Eyl 2024 |
20İzleyin | CVE-2024-8864İstismar yok | composiohq composio calculator.py Calculator code injectioncomposio · composio · CWE-94 | Orta5,1 | — | %0,8 | 14 Eyl 2024 |
- CVE-2024-895839İzleyin
Unrestricted File Write and Read in composiohq/composio
KritikCVSS 9,8İstismar yokEPSS %1composio · composio20 Mar 2025
- CVE-2024-895339İzleyin
Unsafe eval usage in composiohq/composio
KritikCVSS 9,8İstismar yokEPSS %1composio · composio20 Mar 2025
- CVE-2024-895439İzleyin
Authentication Bypass in composiohq/composio
KritikCVSS 9,8İstismar yokEPSS %1composio · composio20 Mar 2025
- CVE-2025-5642730İzleyin
Directory Traversal vulnerability in ComposioHQ v.0.7.20 allows a remote attacker to obtain sensitive information via the _download_file_or_
YüksekCVSS 7,5İstismar yokEPSS %1composio · composio4 Ara 2025
- CVE-2024-895530İzleyin
SSRF in composiohq/composio
YüksekCVSS 7,5İstismar yokEPSS %1composio · composio20 Mar 2025
- CVE-2024-895230İzleyin
SSRF in composiohq/composio
YüksekCVSS 7,5İstismar yokEPSS %1composio · composio20 Mar 2025
- CVE-2024-5352625İzleyin
composio >=0.5.40 is vulnerable to Command Execution in composio_openai, composio_claude, and composio_julep via the handle_tool_calls funct
OrtaCVSS 6,4İstismar yokEPSS %1composio · composio8 Oca 2025
- CVE-2024-886520İzleyin
composiohq composio api.py path path traversal
OrtaCVSS 5,1İstismar yokEPSS %1composio · composio14 Eyl 2024
- CVE-2024-886420İzleyin
composiohq composio calculator.py Calculator code injection
OrtaCVSS 5,1İstismar yokEPSS %1composio · composio14 Eyl 2024