Skip to content
OpenAdvisories

Package · PyPI

composio-core

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.8
    CVE-2024-8952

    SSRF in composiohq/composio

    A Server-Side Request Forgery (SSRF) vulnerability exists in composiohq/composio version v0.4.2, specifically in the /api/actions/execute/WEBTOOL_SCRAPE_WEBSITE_CONTENT endpoint. This vulnerability allows an attacker to read files, access AWS metadata, and in…

    ComposioHQ composiohq/composio composio-core PyPI
  • Medium 6.8
    CVE-2024-8955

    SSRF in composiohq/composio

    A Server-Side Request Forgery (SSRF) vulnerability exists in composiohq/composio version v0.4.4. This vulnerability allows an attacker to read the contents of any file in the system by exploiting the BROWSERTOOL_GOTO_PAGE and BROWSERTOOL_GET_PAGE_DETAILS acti…

    ComposioHQ composiohq/composio composio-core PyPI
  • Medium 5.5
    CVE-2024-8864

    composiohq composio calculator.py Calculator code injection

    A vulnerability has been found in composiohq composio up to 0.5.6 and classified as critical. Affected by this vulnerability is the function Calculator of the file python/composio/tools/local/mathematical/actions/calculator.py. The manipulation leads to code …

    ComposioHQ composio composio-core PyPI