Skip to content
OpenAdvisories

Product · ComposioHQ

composio

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-59807

    Composio SDK < 0.2.32-beta.283 - Sensitive File Upload via tool-file-uploads.ts

    Composio SDK before 0.2.32-beta.283 contains a path validation bypass vulnerability that allows attackers to read and exfiltrate sensitive files by exploiting a missing assertSafeFileUploadPath check in the readFileFromDisk function within tool-file-uploads.t…

    ComposioHQ composio
  • Medium 5.5
    CVE-2024-8864

    composiohq composio calculator.py Calculator code injection

    A vulnerability has been found in composiohq composio up to 0.5.6 and classified as critical. Affected by this vulnerability is the function Calculator of the file python/composio/tools/local/mathematical/actions/calculator.py. The manipulation leads to code …

    ComposioHQ composio composio-core PyPI