Skip to content
OpenAdvisories

Vendor

ComposioHQ

8 known vulnerabilities.

Products

composiohq/composio 5 composio 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-8954

    Authentication Bypass in composiohq/composio

    In composiohq/composio version 0.5.10, the API does not validate the `x-api-key` header's value during the authentication step. This vulnerability allows an attacker to bypass authentication by providing any random value in the `x-api-key` header, thereby gai…

    ComposioHQ composiohq/composio