Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/composio-core@0.5.37rc1
Typepypi
Namespace
Namecomposio-core
Version0.5.37rc1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version0.5.43
Latest_non_vulnerable_version0.5.43
Affected_by_vulnerabilities
0
url VCID-jfxb-bxv7-8qgc
vulnerability_id VCID-jfxb-bxv7-8qgc
summary In composiohq/composio version 0.4.3, the mathematical_calculator endpoint uses the unsafe eval() function to perform mathematical operations. This can lead to arbitrary code execution if untrusted input is passed to the eval() function.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-8953
reference_id
reference_type
scores
0
value 0.00268
scoring_system epss
scoring_elements 0.50537
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-8953
1
reference_url https://github.com/ComposioHQ/composio/blob/b932d99e67f0fe95f8a0a24be9352e3f99059bc3/python/composio/tools/local/mathematical/actions/calculator.py#L37
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ComposioHQ/composio/blob/b932d99e67f0fe95f8a0a24be9352e3f99059bc3/python/composio/tools/local/mathematical/actions/calculator.py#L37
2
reference_url https://github.com/ComposioHQ/composio/commit/ed82fb45dc9fbd7f07c535c72bada871c158ae5f
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ComposioHQ/composio/commit/ed82fb45dc9fbd7f07c535c72bada871c158ae5f
3
reference_url https://github.com/ComposioHQ/composio-js
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ComposioHQ/composio-js
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-8953
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-8953
5
reference_url https://huntr.com/bounties/8203d721-e05f-4500-a5bc-c0bec980420c
reference_id 8203d721-e05f-4500-a5bc-c0bec980420c
reference_type
scores
0
value 7.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-03-20T18:10:08Z/
url https://huntr.com/bounties/8203d721-e05f-4500-a5bc-c0bec980420c
6
reference_url https://github.com/advisories/GHSA-5xg7-5662-8x7j
reference_id GHSA-5xg7-5662-8x7j
reference_type
scores
url https://github.com/advisories/GHSA-5xg7-5662-8x7j
fixed_packages
0
url pkg:pypi/composio-core@0.5.43
purl pkg:pypi/composio-core@0.5.43
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/composio-core@0.5.43
aliases CVE-2024-8953, GHSA-5xg7-5662-8x7j
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jfxb-bxv7-8qgc
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/composio-core@0.5.37rc1