composio vulnerabilities
CVEs whose affected-version data names the composio package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-59807Medium· 6.8PoCComposio SDK before 0.2.32-beta.283 contains a path validation bypass vulnerability that allows attackers to read and exfiltrate sensitive files by exploiting a missing assertSafeFileUploadPath check in the readFileFromDisk function with…
Composio SDK before 0.2.32-beta.283 contains a path validation bypass vulnerability that allows attackers to read and exfiltrate sensitive files by exploiting a missing assertSafeFileUploadPath check in the readFileFromDisk function with…
▾ TwilightComposioHQ · composioEPSS 0.37%via NVD
CVE-2025-56427High· 7.5ComposioHQ has a directory traversal vulnerability
ComposioHQ has a directory traversal vulnerability
▾ Twilightcomposio · composioEPSS 0.89%via OSV