CVE-2024-8953

9.8CRITICAL

In composiohq/composio version 0.4.3, the mathematical_calculator endpoint uses the unsafe eval() function to perform mathematical operations. This can lead to arbitrary code execution if untrusted in

Published: 3/20/2025Updated: 4/1/2025
View on NVDView on MITRE

Description

In composiohq/composio version 0.4.3, the mathematical_calculator endpoint uses the unsafe eval() function to perform mathematical operations. This can lead to arbitrary code execution if untrusted input is passed to the eval() function.

AI AnalysisPowered by AI

Affected Products

composiocomposio
0.4.3

References