Packagist Package Vulnerabilities

All 970 PHP / Composer packages with known CVEs, ranked by live CVE volume — 6,583 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 451.api-platform/hal1 CVE
  2. 452.api-platform/json-api1 CVE
  3. 453.arc/web1 CVE
  4. 454.area17/twill1 CVE
  5. 455.athlon1600/youtube-downloader1 CVE
  6. 456.aureuserp/aureuserp1 CVE
  7. 457.auth0/symfony1 CVE
  8. 458.auth0/wordpress1 CVE
  9. 459.automattic/jetpack1 CVE
  10. 460.awesome-support/awesome-support1 CVE
  11. 461.ayacoo/redirect-tab1 CVE
  12. 462.b13/seo_basics1 CVE
  13. 463.backpack/filemanager1 CVE
  14. 464.barrelstrength/sprout-base-email1 CVE
  15. 465.barrelstrength/sprout-forms1 CVE
  16. 466.barryvdh/laravel-translation-manager1 CVE
  17. 467.barzahlen/barzahlen-php1 CVE
  18. 468.bcit-ci/codeigniter1 CVE
  19. 469.bcosca/fatfree1 CVE
  20. 470.bedita/bedita1 CVE
  21. 471.bednee/cooluri1 CVE
  22. 472.bigfork/silverstripe-form-capture1 CVE
  23. 473.billabear/billabear1 CVE
  24. 474.binarytorch/larecipe1 CVE
  25. 475.bk2k/bootstrap-package1 CVE
  26. 476.blueimp/jquery-file-upload1 CVE
  27. 477.bmarshall511/wordpress_zero_spam1 CVE
  28. 478.brightlocal/phpwhois1 CVE
  29. 479.brotkrueml/schema1 CVE
  30. 480.brotkrueml/typo3-matomo-integration1 CVE
  31. 481.bugsnag/bugsnag-laravel1 CVE
  32. 482.bvbmedia/multishop1 CVE
  33. 483.cadmium-org/cadmium-cms1 CVE
  34. 484.cakephp/authentication1 CVE
  35. 485.cakephp/debug_kit1 CVE
  36. 486.cakephp/queue1 CVE
  37. 487.cardgate/magento21 CVE
  38. 488.cardgate/woocommerce1 CVE
  39. 489.catfan/medoo1 CVE
  40. 490.causal/oidc1 CVE
  41. 491.cesargb/laravel-magiclink1 CVE
  42. 492.cesnet/simplesamlphp-module-proxystatistics1 CVE
  43. 493.chamilo/chamilo-lms1 CVE
  44. 494.chriskacerguis/codeigniter-restserver1 CVE
  45. 495.chrome-php/chrome1 CVE
  46. 496.civicrm/civicrm-core1 CVE
  47. 497.clickstorm/cs-seo1 CVE
  48. 498.codeception/codeception1 CVE
  49. 499.codingms/modules1 CVE
  50. 500.commerceteam/commerce1 CVE

Which Packagist packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →