Ramas de versiones afectadas
Vulnerabilidades conocidas
| CVE | Título | Versiones afectadas | CVSS | Explotada | EPSS | Publicación |
|---|---|---|---|---|---|---|
| CVE-2026-59807 | Composio SDK < 0.2.32-beta.283 - Sensitive File Upload via tool-file-uploads.ts | < 0.2.32-beta.283 | 8.9 | — | 2026-07-09 | |
| CVE-2025-56427 | Directory Traversal vulnerability in ComposioHQ v.0.7.20 allows a remote attacker to obtain sensitive informat... | * | 7.5 | — | 2025-12-04 | |
| CVE-2024-53526 | composio >=0.5.40 is vulnerable to Command Execution in composio_openai, composio_claude, and composio_julep v... | * | 6.4 | — | 2025-01-08 | |
| CVE-2024-8865 | composiohq composio api.py path path traversal | = 0.5.0 = 0.5.1 = 0.5.2 | 5.1 | — | 2024-09-15 | |
| CVE-2024-8864 | composiohq composio calculator.py Calculator code injection | = 0.5.0 = 0.5.1 = 0.5.2 | 5.1 | — | 2024-09-15 |
Controla estas versiones en tus propios servidores
InfraGuard recopila las versiones de software instaladas en cada servidor y señala las que tienen vulnerabilidades conocidas. Autoalojado: nada sale de tu red.
Datos: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (consulta EPSS en https://www.first.org/epss), endoflife.date. Lista de software: awesome-selfhosted (CC BY-SA 3.0).