Sploitus

19 exploited vulnerabilities in Composer

Vulnerabilities with publicly known exploits

Vendors
Composer, Astra Linux, Linux Mint, Red Os, Suse, Canonical
With known exploits
19
Affected Getcomposer Composer versions
≤ 2.2.26, 2.9.5
Affected Ocproducts Composr versions
= 10.0.36
Affected Composr Project Composr versions
≤ 10.0.30

Vulnerabilities with exploits

Highest CVSS first — 5 of these already have exploit code on Sploitus

CVE-2026-40261 2 exploits
CVSS 10.0 HIGH 2026-04-14FIX AVAILABLE
Exploit for CVE-2026-40176Exploit for CVE-2026-40176
CVE-2024-35242
CVSS 10.0 HIGH 2024-06-10FIX AVAILABLE
CVE-2024-35241
CVSS 10.0 HIGH 2024-06-10FIX AVAILABLE
CVE-2020-35184
CVSS 10.0 CRITICAL 2020-12-17FIX AVAILABLE
CVE-2021-41116
CVSS 9.8 CRITICAL 2021-10-05FIX AVAILABLE
CVE-2021-30149 3 exploits
CVSS 9.8 CRITICAL 2021-04-06
Composr 10.0.36 - Remote Code ExecutionComposr 10.0.36 Shell Upload
CVE-2022-24828
CVSS 9.3 HIGH 2022-04-13
CVE-2023-43655
CVSS 9.0 HIGH 2023-09-29FIX AVAILABLE
CVE-2024-24821
CVSS 8.8 HIGH 2024-02-08FIX AVAILABLE
CVE-2015-8371
CVSS 8.8 HIGH 2023-09-21FIX AVAILABLE
CVE-2021-29472
CVSS 8.8 HIGH 2021-03-30FIX AVAILABLE
CVE-2026-40176 4 exploits
CVSS 7.8 HIGH 2026-04-14FIX AVAILABLE
Exploit for Improper Input Validation in Getcomposer ComposerExploit for CVE-2026-40176
CVE-2026-45793
CVSS 7.5 HIGH 2026-05-14FIX AVAILABLE
CVE-2026-59948
CVSS 7.0 HIGH 2026-07-08FIX AVAILABLE
CVE-2026-59946
CVSS 6.1 MEDIUM 2026-07-08FIX AVAILABLE
CVE-2021-30150 3 exploits
CVSS 6.1 MEDIUM 2021-04-06
Composr CMS 10.0.36 - Cross Site Scripting VulnerabilityComposr CMS 10.0.36 - Cross Site Scripting
CVE-2020-8789 3 exploits
CVSS 5.4 MEDIUM 2020-05-22FIX AVAILABLE
Composr CMS 10.0.30 - Persistent Cross-Site Scripting VulnerabilityComposr CMS 10.0.30 - Persistent Cross-Site Scripting
CVE-2026-59947
CVSS 4.7 MEDIUM 2026-07-08FIX AVAILABLE
CVE-2025-67746
CVSS 4.3 MEDIUM 2025-01-01FIX AVAILABLE