CVE-2024-53526

composio =0.5.40 is vulnerable to Command Execution in composioopenai, composioclaude, and composiojulep via the handletoolcalls function...

CVE-2024-53526

The composio library (version >=0.5.40 ) is vulnerable to Command Execution within the composio_openai , composio_claude , and composio_julep components. The flaw exists in the handle_tool_calls function, where improper neutralization of special elements used in commands (CWE-77) allows for po...