Vulnerabilities for composio-core

First version without a known vulnerability: 0.5.43

Details

• GHSA-38mg-wm59-g64x2025-03-20

  composio allows Server-Side Request Forgery (SSRF) in BROWSERTOOL

• GHSA-5xg7-5662-8x7j2025-03-20

  Composio Eval Injection Vulnerability

  Fixed in: 0.5.43

• GHSA-qvg9-vp87-h3hr2025-03-20

  composio Server-Side Request Forgery (SSRF) vulnerability

• GHSA-66r2-xm28-74w92024-09-16

  Composio Path Traversal vulnerability

• GHSA-mrmh-3hqh-pfw72024-09-16

  Composio Code Injection Vulnerability