composio records

9 published records for vendor composio.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 22.2%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

9 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2024-8958No exploit	Unrestricted File Write and Read in composiohq/composiocomposio · composio · CWE-434 pre-auth RCE File upload	Critical9.8	—	1.4%	Mar 20, 2025
39Monitor	CVE-2024-8953No exploit	Unsafe eval usage in composiohq/composiocomposio · composio · CWE-627 pre-auth RCE	Critical9.8	—	1.2%	Mar 20, 2025
39Monitor	CVE-2024-8954No exploit	Authentication Bypass in composiohq/composiocomposio · composio · CWE-304 Pre-auth Auth bypass	Critical9.8	—	0.9%	Mar 20, 2025
30Monitor	CVE-2025-56427No exploit	Directory Traversal vulnerability in ComposioHQ v.0.7.20 allows a remote attacker to obtain sensitive information via the _download_file_or_composio · composio · CWE-200 Pre-auth Path traversal Info leak	High7.5	—	0.9%	Dec 4, 2025
30Monitor	CVE-2024-8955No exploit	SSRF in composiohq/composiocomposio · composio · CWE-918 Pre-auth SSRF	High7.5	—	0.7%	Mar 20, 2025
30Monitor	CVE-2024-8952No exploit	SSRF in composiohq/composiocomposio · composio · CWE-918 Pre-auth SSRF	High7.5	—	0.7%	Mar 20, 2025
25Monitor	CVE-2024-53526No exploit	composio >=0.5.40 is vulnerable to Command Execution in composio_openai, composio_claude, and composio_julep via the handle_tool_calls functcomposio · composio · CWE-77 RCE Command injection	Medium6.4	—	0.6%	Jan 8, 2025
20Monitor	CVE-2024-8865No exploit	composiohq composio api.py path path traversalcomposio · composio · CWE-22 Path traversal	Medium5.1	—	0.9%	Sep 14, 2024
20Monitor	CVE-2024-8864No exploit	composiohq composio calculator.py Calculator code injectioncomposio · composio · CWE-94 RCE	Medium5.1	—	0.8%	Sep 14, 2024

CVE-2024-8958
39Monitor
Unrestricted File Write and Read in composiohq/composio
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- File upload
composio · composioMar 20, 2025
CVE-2024-8953
39Monitor
Unsafe eval usage in composiohq/composio
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
composio · composioMar 20, 2025
CVE-2024-8954
39Monitor
Authentication Bypass in composiohq/composio
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
composio · composioMar 20, 2025
CVE-2025-56427
30Monitor
Directory Traversal vulnerability in ComposioHQ v.0.7.20 allows a remote attacker to obtain sensitive information via the _download_file_or_
HighCVSS 7.5No exploitEPSS 1%
composio · composioDec 4, 2025
CVE-2024-8955
30Monitor
SSRF in composiohq/composio
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- SSRF
composio · composioMar 20, 2025
CVE-2024-8952
30Monitor
SSRF in composiohq/composio
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- SSRF
composio · composioMar 20, 2025
CVE-2024-53526
25Monitor
composio >=0.5.40 is vulnerable to Command Execution in composio_openai, composio_claude, and composio_julep via the handle_tool_calls funct
MediumCVSS 6.4No exploitEPSS 1%
- RCE
- Command injection
composio · composioJan 8, 2025
CVE-2024-8865
20Monitor
composiohq composio api.py path path traversal
MediumCVSS 5.1No exploitEPSS 1%
- Path traversal
composio · composioSep 14, 2024
CVE-2024-8864
20Monitor
composiohq composio calculator.py Calculator code injection
MediumCVSS 5.1No exploitEPSS 1%
- RCE
composio · composioSep 14, 2024