Skip to content
OpenAdvisories

Vendor

ComposioHQ

8 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.2

    Unrestricted File Write and Read in composiohq/composio

    In composiohq/composio version 0.4.3, there is an unrestricted file write and read vulnerability in the filetools actions. Due to improper validation of file paths, an attacker can read and write files anywhere on the server, potentially leading to privilege …

  • High 7.2

    Unsafe eval usage in composiohq/composio

    In composiohq/composio version 0.4.3, the mathematical_calculator endpoint uses the unsafe eval() function to perform mathematical operations. This can lead to arbitrary code execution if untrusted input is passed to the eval() function.