pypi package report

Is composio safe?

1 known vulnerability, worst severity MODERATE.

cvss
7.5

how bad it is if exploited, out of 10

epss
0.90%

chance of exploitation in the next 30 days

xyz score
not scored

CyberXYZ composite, out of 10

fig. 01 — GHSA-3mwv-j45g-vp3w, the advisory selected below

// advisories

GHSA-3mwv-j45g-vp3w

MODERATECVE-2025-56427

Directory Traversal vulnerability in ComposioHQ v.0.7.20 allows a remote attacker to obtain sensitive information via the downloadfileordir function.

Affected
<= 0.7.20
Fixed in
not stated
Weakness
CWE-22
Published
2025-12-04
Source
github

GHSANVDMITREreferencereference


// dependencies

9 direct, 3 carrying known advisories, worst CRITICAL

Sign in for dependency paths and remediation

// ai model usage

No published models are known to use this package.


Checked 2026-09-22 at 01:45 UTC. The most recent advisory here was published 2025-12-04. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Think a verdict here is wrong? Tell us — we respond within 2 business days.
Is composio safe? pypi package security report | CyberXYZ