Packagist Package Vulnerabilities

All 970 PHP / Composer packages with known CVEs, ranked by live CVE volume — 6,583 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 551.drupal/formatter_suite1 CVE
  2. 552.drupal/gdpr1 CVE
  3. 553.drupal/ignition1 CVE
  4. 554.drupal/json_field1 CVE
  5. 555.drupal/lightgallery1 CVE
  6. 556.drupal/link_field_display_mode_formatter1 CVE
  7. 557.drupal/matomo1 CVE
  8. 558.drupal/oauth2_client1 CVE
  9. 559.drupal/oauth2_server1 CVE
  10. 560.drupal/obfuscate1 CVE
  11. 561.drupal-pattern-lab/unified-twig-extensions1 CVE
  12. 562.drupal/plausible_tracking1 CVE
  13. 563.drupal/rapidoc_elements_field_formatter1 CVE
  14. 564.drupal/reverse_proxy_header1 CVE
  15. 565.drupal/sector1 CVE
  16. 566.drupal/simple_multistep1 CVE
  17. 567.drupal/simple_oauth1 CVE
  18. 568.drupal/spamspan1 CVE
  19. 569.drupal/tfa1 CVE
  20. 570.drupal/umami_analytics1 CVE
  21. 571.duncanmcclean/guest-entries1 CVE
  22. 572.ecodev/newsletter1 CVE
  23. 573.ectouch/ectouch1 CVE
  24. 574.ether/logs1 CVE
  25. 575.evoweb/sf-register1 CVE
  26. 576.ezsystems/ezplatform-admin-ui1 CVE
  27. 577.ezsystems/ezplatform-graphql1 CVE
  28. 578.fastly/magento21 CVE
  29. 579.fenom/fenom1 CVE
  30. 580.filament/forms1 CVE
  31. 581.filp/whoops1 CVE
  32. 582.fineuploader/php-traditional-server1 CVE
  33. 583.fisharebest/webtrees1 CVE
  34. 584.fixpunkt/fp-masterquiz1 CVE
  35. 585.flarum/flarum1 CVE
  36. 586.flarum/mentions1 CVE
  37. 587.flarum/nicknames1 CVE
  38. 588.flarum/sticky1 CVE
  39. 589.floriangaerber/magnesium1 CVE
  40. 590.fluidtypo3/vhs1 CVE
  41. 591.fof/byobu1 CVE
  42. 592.fof/oauth1 CVE
  43. 593.fof/pretty-mail1 CVE
  44. 594.fof/upload1 CVE
  45. 595.foodcoopshop/foodcoopshop1 CVE
  46. 596.fooman/tcpdf1 CVE
  47. 597.frappant/frp-form-answers1 CVE
  48. 598.friendsofsymfony1/swiftmailer1 CVE
  49. 599.friendsofsymfony/user-bundle1 CVE
  50. 600.friendsoftypo3/mediace1 CVE

Which Packagist packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →