CVE-2024-8955
2 advisories.
PyPI/composio-core CVE-2024-8955: medium 6.8
composio allows Server-Side Request Forgery (SSRF) in BROWSERTOOL
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.4.4 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-38mg-wm59-g64x
- https://nvd.nist.gov/vuln/detail/CVE-2024-8955
- https://github.com/ComposioHQ/composio
- https://github.com/ComposioHQ/composio/blob/master/python/composio/tools/local/browsertool/actions/goto_page.py#L1
- https://huntr.com/bounties/13bc0399-2d9b-449e-95f2-6e9a7e39383d
CVE-2024-8955 · published · modified · JSON
PyPI/composio-core CVE-2024-8955: medium 6.8
composio allows Server-Side Request Forgery (SSRF) in BROWSERTOOL
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.4.4 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-1263
- https://nvd.nist.gov/vuln/detail/CVE-2024-8955
- https://github.com/ComposioHQ/composio
- https://github.com/ComposioHQ/composio/blob/master/python/composio/tools/local/browsertool/actions/goto_page.py#L1
- https://huntr.com/bounties/13bc0399-2d9b-449e-95f2-6e9a7e39383d
- https://pypi.org/project/composio-core
- https://github.com/advisories/GHSA-38mg-wm59-g64x
CVE-2024-8955 · published · modified · JSON