Lucene search
+L

4 matches found

RedhatCVE
RedhatCVE
added 2025/03/22 11:23 a.m.23 views

CVE-2024-8953

In composiohq/composio version 0.4.3, the mathematicalcalculator endpoint uses the unsafe eval function to perform mathematical operations. This can lead to arbitrary code execution if untrusted input is passed to the eval function...

9.8CVSS7.8AI score0.01103EPSS
SaveExploits1References1
NVD
NVD
added 2025/03/20 10:15 a.m.33 views

CVE-2024-8953

In composiohq/composio version 0.4.3, the mathematicalcalculator endpoint uses the unsafe eval function to perform mathematical operations. This can lead to arbitrary code execution if untrusted input is passed to the eval function...

9.8CVSS0.01103EPSS
SaveExploits1References1
OSV
OSV
added 2025/03/20 10:10 a.m.10 views

CVE-2024-8953 Unsafe eval usage in composiohq/composio

In composiohq/composio version 0.4.3, the mathematicalcalculator endpoint uses the unsafe eval function to perform mathematical operations. This can lead to arbitrary code execution if untrusted input is passed to the eval function...

7.2CVSS7.6AI score0.01103EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/03/20 12:0 a.m.4 views

composio 安全漏洞

Composio is a production-ready toolset for AI agents open-sourced by Composio. A security vulnerability exists in composio version 0.4.3, which stems from the use of an insecure eval function in the mathematicalcalculator endpoint and could lead to arbitrary code execution...

9.8CVSS7.4AI score0.01103EPSS
SaveExploits1References1
Rows per page
Query Builder