Composiohq
7 CVEs across 2 Composiohq products. Browse Composiohq vulnerabilities, severities, and proof-of-concept exploits.
Composiohq products with known CVEs
Composiohq CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-59807 | Medium | 6.8 | 2026-07-08 | Composio SDK before 0.2.32-beta.283 contains a path validation bypass vulnerability that allows attackers to read and exfiltrate sensitive files by exploiting… |
CVE-2024-8958 | Critical | 9.8 | 2025-03-20 | In composiohq/composio version 0.4.3, there is an unrestricted file write and read vulnerability in the filetools actions. Due to improper validation of file p… |
CVE-2024-8955 | High | 7.5 | 2025-03-20 | A Server-Side Request Forgery (SSRF) vulnerability exists in composiohq/composio version v0.4.4. This vulnerability allows an attacker to read the contents of… |
CVE-2024-8954 | Critical | 9.8 | 2025-03-20 | In composiohq/composio version 0.5.10, the API does not validate the `x-api-key` header's value during the authentication step. This vulnerability allows an at… |
CVE-2024-8953 | Critical | 9.8 | 2025-03-20 | In composiohq/composio version 0.4.3, the mathematical_calculator endpoint uses the unsafe eval() function to perform mathematical operations. This can lead to… |
CVE-2024-8952 | High | 7.5 | 2025-03-20 | A Server-Side Request Forgery (SSRF) vulnerability exists in composiohq/composio version v0.4.2, specifically in the /api/actions/execute/WEBTOOL_SCRAPE_WEBSIT… |
CVE-2024-8865 | Low | 3.5 | 2024-09-15 | A vulnerability was found in composiohq composio up to 0.5.8 and classified as problematic. Affected by this issue is the function path of the file composio\se… |
CVE-2024-8864 | Medium | 5.5 | 2024-09-15 | A vulnerability has been found in composiohq composio up to 0.5.6 and classified as critical. Affected by this vulnerability is the function Calculator of the… |