CVE-2024-8953

In composiohq/composio version 0.4.3, the mathematicalcalculator endpoint uses the unsafe eval function to perform mathematical operations. This can lead to arbitrary code execution if untrusted input is passed to the eval function...

CVE-2024-8953

In composiohq/composio version 0.4.3, the mathematicalcalculator endpoint uses the unsafe eval function to perform mathematical operations. This can lead to arbitrary code execution if untrusted input is passed to the eval function...

CVE-2024-8953 Unsafe eval usage in composiohq/composio

In composiohq/composio version 0.4.3, the mathematicalcalculator endpoint uses the unsafe eval function to perform mathematical operations. This can lead to arbitrary code execution if untrusted input is passed to the eval function...

composio 安全漏洞

Composio is a production-ready toolset for AI agents open-sourced by Composio. A security vulnerability exists in composio version 0.4.3, which stems from the use of an insecure eval function in the mathematicalcalculator endpoint and could lead to arbitrary code execution...

PT-2025-12250

Name of the Vulnerable Software and Affected Versions composiohq/composio version 0.4.3 Description The issue concerns the use of the unsafe eval function in the "mathematical calculator" endpoint to perform mathematical operations. This can lead to arbitrary code execution if untrusted input is...