Skip to content
OpenAdvisories

Vendor

ComposioHQ

8 known vulnerabilities.

Products

composiohq/composio 5 composio 3
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-59807

    Composio SDK < 0.2.32-beta.283 - Sensitive File Upload via tool-file-uploads.ts

    Composio SDK before 0.2.32-beta.283 contains a path validation bypass vulnerability that allows attackers to read and exfiltrate sensitive files by exploiting a missing assertSafeFileUploadPath check in the readFileFromDisk function within tool-file-uploads.t…

    ComposioHQ composio
  • Medium 6.8
    CVE-2024-8952

    SSRF in composiohq/composio

    A Server-Side Request Forgery (SSRF) vulnerability exists in composiohq/composio version v0.4.2, specifically in the /api/actions/execute/WEBTOOL_SCRAPE_WEBSITE_CONTENT endpoint. This vulnerability allows an attacker to read files, access AWS metadata, and in…

    ComposioHQ composiohq/composio composio-core PyPI
  • Medium 6.8
    CVE-2024-8955

    SSRF in composiohq/composio

    A Server-Side Request Forgery (SSRF) vulnerability exists in composiohq/composio version v0.4.4. This vulnerability allows an attacker to read the contents of any file in the system by exploiting the BROWSERTOOL_GOTO_PAGE and BROWSERTOOL_GET_PAGE_DETAILS acti…

    ComposioHQ composiohq/composio composio-core PyPI
  • Medium 5.5
    CVE-2024-8864

    composiohq composio calculator.py Calculator code injection

    A vulnerability has been found in composiohq composio up to 0.5.6 and classified as critical. Affected by this vulnerability is the function Calculator of the file python/composio/tools/local/mathematical/actions/calculator.py. The manipulation leads to code …

    ComposioHQ composio composio-core PyPI