Browse CVEs

HIGH 7.5 CVE-2025-56427 Directory Traversal vulnerability in ComposioHQ v.0.7.20 allows a remote attacker to obtain sensitive information via the _download_file_or_dir funct… Composio No fix yet Fix from $1,9502025-12-04 CRITICAL 9.8 CVE-2024-8958 In composiohq/composio version 0.4.3, there is an unrestricted file write and read vulnerability in the filetools actions. Due to improper validation… Composio No fix yet Fix from $2,3002025-03-20 HIGH 7.5 CVE-2024-8955 A Server-Side Request Forgery (SSRF) vulnerability exists in composiohq/composio version v0.4.4. This vulnerability allows an attacker to read the co… Composio No fix yet Fix from $1,9502025-03-20 CRITICAL 9.8 CVE-2024-8953 In composiohq/composio version 0.4.3, the mathematical_calculator endpoint uses the unsafe eval() function to perform mathematical operations. This c… Composio No fix yet Fix from $2,3002025-03-20 CRITICAL 9.8 CVE-2024-8954 In composiohq/composio version 0.5.10, the API does not validate the `x-api-key` header's value during the authentication step. This vulnerability al… Composio No fix yet Fix from $2,3002025-03-20 HIGH 7.5 CVE-2024-8952 A Server-Side Request Forgery (SSRF) vulnerability exists in composiohq/composio version v0.4.2, specifically in the /api/actions/execute/WEBTOOL_SCR… Composio No fix yet Fix from $1,9502025-03-20 MEDIUM 6.4 CVE-2024-53526 composio >=0.5.40 is vulnerable to Command Execution in composio_openai, composio_claude, and composio_julep via the handle_tool_calls function. Composio No fix yet Fix from $1,6002025-01-08 HIGH 8.8 CVE-2024-8864 A vulnerability has been found in composiohq composio up to 0.5.6 and classified as critical. Affected by this vulnerability is the function Calculat… Composio after 0.5.6 Fix from $1,9502024-09-15