Homepage
About Snyk

composio-core@0.3.9rc4 vulnerabilities

Core package to act as a bridge between composio platform and other services.

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the composio-core package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Arbitrary File Read

composio-core is a Core package to act as a bridge between composio platform and other services.

Affected versions of this package are vulnerable to Arbitrary File Read over the /api/download endpoint, which accepts a file parameter than can read any files accessible to the application user.

How to fix Arbitrary File Read?

There is no fixed version for composio-core.

[0,)
  • M
Code Injection

composio-core is a Core package to act as a bridge between composio platform and other services.

Affected versions of this package are vulnerable to Code Injection in the Calculator class, which passes arbitrary input to the eval() function.

How to fix Code Injection?

Upgrade composio-core to version or higher.

[0,)
Go back to all versions of this package