Packagist Package Vulnerabilities

All 970 PHP / Composer packages with known CVEs, ranked by live CVE volume — 6,583 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 651.jsmitty12/phpwhois1 CVE
  2. 652.jweiland/events21 CVE
  3. 653.jweiland/kk-downloader1 CVE
  4. 654.kantorge/yaffa1 CVE
  5. 655.kazist/phpwhois1 CVE
  6. 656.kelvinmo/simplejwt1 CVE
  7. 657.kelvinmo/simplexrd1 CVE
  8. 658.KnpLabs/knp-snappy1 CVE
  9. 659.kohana/core1 CVE
  10. 660.kreait/firebase-php1 CVE
  11. 661.kumbiaphp/kumbiapp1 CVE
  12. 662.kunstmaan/bundles-cms1 CVE
  13. 663.kunstmaan/media-bundle1 CVE
  14. 664.la-haute-societe/tcpdf1 CVE
  15. 665.laktak/hjson1 CVE
  16. 666.laminas/laminas-form1 CVE
  17. 667.laminas/laminas-http1 CVE
  18. 668.laravel/fortify1 CVE
  19. 669.laravel/laravel1 CVE
  20. 670.laravel/passport1 CVE
  21. 671.laravel/pulse1 CVE
  22. 672.lara-zeus/artemis1 CVE
  23. 673.lara-zeus/dynamic-dashboard1 CVE
  24. 674.lavitto/typo3-form-to-database1 CVE
  25. 675.lcobucci/jwt1 CVE
  26. 676.league/oauth2-server1 CVE
  27. 677.lexik/jwt-authentication-bundle1 CVE
  28. 678.libreform/libreform1 CVE
  29. 679.liftkit/database1 CVE
  30. 680.lightsaml/lightsaml1 CVE
  31. 681.livehelperchat/livehelperchat1 CVE
  32. 682.livewire-filemanager/filemanager1 CVE
  33. 683.livewire/volt1 CVE
  34. 684.lms/routes1 CVE
  35. 685.localizationteam/l10nmgr1 CVE
  36. 686.lomkit/laravel-rest-api1 CVE
  37. 687.luracast/restler1 CVE
  38. 688.luyadev/yii-helpers1 CVE
  39. 689.maatwebsite/excel1 CVE
  40. 690.maestroerror/php-heic-to-jpg1 CVE
  41. 691.magento/magento1ce1 CVE
  42. 692.magento/magento1ee1 CVE
  43. 693.mahocommerce/maho1 CVE
  44. 694.maikuolan/phpmussel1 CVE
  45. 695.mainwp/mainwp1 CVE
  46. 696.manogi/nova-tiptap1 CVE
  47. 697.marcwillmann/turn1 CVE
  48. 698.markhuot/craftql1 CVE
  49. 699.marshmallow/nova-tiptap1 CVE
  50. 700.matyhtf/framework1 CVE

Which Packagist packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →