중간취약점
Composio Command Execution vulnerability
GHSA-8h93-28hg-fj84 · CVE-2024-53526 · PYSEC-2026-1268 · PYSEC-2026-2428 · PYSEC-2026-2429 · 갱신 2026. 7. 14.
영향 받는 패키지
| 생태계 | 패키지 | 수정 버전 |
|---|---|---|
| PyPI | composio-claude | 0.6.9 |
| PyPI | composio-openai | 0.6.9 |
| PyPI | composio-julep | 0.6.9 |
원문
출처
- ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2024-53526
- WEBhttps://github.com/ComposioHQ/composio/issues/1073
- WEBhttps://github.com/ComposioHQ/composio/pull/1107
- WEBhttps://github.com/ComposioHQ/composio/commit/f496f7fa776335ae7825cad2991c9b38923271fc
- PACKAGEhttps://github.com/ComposioHQ/composio
- WEBhttps://github.com/ComposioHQ/composio/blob/11ee7470aa6543097ee30bb036af8e9726dc7a85/python/plugins/claude/composio_claude/toolset.py#L156
- WEBhttps://github.com/ComposioHQ/composio/blob/11ee7470aa6543097ee30bb036af8e9726dc7a85/python/plugins/julep/composio_julep/toolset.py#L21