Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2024-8953

Unsafe eval usage in composiohq/composio

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
@huntr_ai

Description

In composiohq/composio version 0.4.3, the mathematical_calculator endpoint uses the unsafe eval() function to perform mathematical operations. This can lead to arbitrary code execution if untrusted input is passed to the eval() function.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

composiohq composiohq/composio

  • unspecified to ≤ latestaffected

References