CVE-2025-56427
2 advisories.
PyPI/composio CVE-2025-56427: high 7.5, EPSS 0.89%
ComposioHQ has a directory traversal vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.7.20 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-3mwv-j45g-vp3w
- https://nvd.nist.gov/vuln/detail/CVE-2025-56427
- https://github.com/ComposioHQ/composio
- https://github.com/ComposioHQ/composio/blob/master/python/composio/server/api.py#L278
- https://github.com/TOAST-Research/pocs/blob/main/composio/composio_1.md
CVE-2025-56427 · published · modified · JSON
PyPI/composio CVE-2025-56427: high 7.5, EPSS 0.89%
ComposioHQ has a directory traversal vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.7.20 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-1262
- https://nvd.nist.gov/vuln/detail/CVE-2025-56427
- https://github.com/ComposioHQ/composio
- https://github.com/ComposioHQ/composio/blob/master/python/composio/server/api.py#L278
- https://github.com/TOAST-Research/pocs/blob/main/composio/composio_1.md
- https://pypi.org/project/composio
- https://github.com/advisories/GHSA-3mwv-j45g-vp3w
CVE-2025-56427 · published · modified · JSON