Packagist Package Vulnerabilities

All 970 PHP / Composer packages with known CVEs, ranked by live CVE volume — 6,583 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 951.xpressengine/xpressengine1 CVE
  2. 952.yab/quarx1 CVE
  3. 953.yansongda/pay1 CVE
  4. 954.yidashi/yii2cmf1 CVE
  5. 955.yii2mod/yii2-cms1 CVE
  6. 956.yiisoft/yii2-elasticsearch1 CVE
  7. 957.yikesinc/yikes-inc-easy-mailchimp-extender1 CVE
  8. 958.yoast/duplicate-post1 CVE
  9. 959.zendframework/zend-cache1 CVE
  10. 960.zendframework/zend-crypt1 CVE
  11. 961.zendframework/zend-diactoros1 CVE
  12. 962.zendframework/zend-http1 CVE
  13. 963.zendframework/zend-mail1 CVE
  14. 964.zendframework/zendxml1 CVE
  15. 965.zenstruck/collection1 CVE
  16. 966.zetacomponents/mail1 CVE
  17. 967.zfcampus/zf-apigility-doctrine1 CVE
  18. 968.zf-commons/zfc-user1 CVE
  19. 969.z-push/z-push-dev1 CVE
  20. 970.zumba/json-serializer1 CVE

Which Packagist packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →