Vulnerabilities > Composio
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2025-03-20 | CVE-2024-8952 | Unspecified vulnerability in Composio 0.4.2 A Server-Side Request Forgery (SSRF) vulnerability exists in composiohq/composio version v0.4.2, specifically in the /api/actions/execute/WEBTOOL_SCRAPE_WEBSITE_CONTENT endpoint. | 7.5 |
| 2025-03-20 | CVE-2024-8953 | Improper Control of Dynamically-Managed Code Resources vulnerability in Composio 0.4.3 In composiohq/composio version 0.4.3, the mathematical_calculator endpoint uses the unsafe eval() function to perform mathematical operations. | 9.8 |
| 2025-03-20 | CVE-2024-8958 | Unspecified vulnerability in Composio 0.4.3 In composiohq/composio version 0.4.3, there is an unrestricted file write and read vulnerability in the filetools actions. | 9.8 |
| 2024-09-15 | CVE-2024-8864 | Code Injection vulnerability in Composio A vulnerability has been found in composiohq composio up to 0.5.6 and classified as critical. | 8.8 |
| 2024-09-15 | CVE-2024-8865 | Path Traversal vulnerability in Composio A vulnerability was found in composiohq composio up to 0.5.8 and classified as problematic. | 4.9 |