Packagist Package Vulnerabilities

All 970 PHP / Composer packages with known CVEs, ranked by live CVE volume — 6,582 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 201.codeigniter4/shield4 CVEs
  2. 202.cotonti/cotonti4 CVEs
  3. 203.dcat/laravel-admin4 CVEs
  4. 204.drupal/ai4 CVEs
  5. 205.elmsln/haxcms4 CVEs
  6. 206.evolutioncms/evolution4 CVEs
  7. 207.ezsystems/ezplatform-kernel4 CVEs
  8. 208.ezyang/htmlpurifier4 CVEs
  9. 209.filament/tables4 CVEs
  10. 210.flarum/framework4 CVEs
  11. 211.froala/wysiwyg-editor4 CVEs
  12. 212.livewire/livewire4 CVEs
  13. 213.magento/product-community-edition4 CVEs
  14. 214.moonshine/moonshine4 CVEs
  15. 215.notrinos/notrinos-erp4 CVEs
  16. 216.oro/platform4 CVEs
  17. 217.pheditor/pheditor4 CVEs
  18. 218.phppgadmin/phppgadmin4 CVEs
  19. 219.phpunit/phpunit4 CVEs
  20. 220.pixelfed/pixelfed4 CVEs
  21. 221.pontedilana/php-weasyprint4 CVEs
  22. 222.pyrocms/pyrocms4 CVEs
  23. 223.react/http4 CVEs
  24. 224.reportico-web/reportico4 CVEs
  25. 225.silverstripe/admin4 CVEs
  26. 226.simplesamlphp/saml2-legacy4 CVEs
  27. 227.sjbr/sr-feuser-register4 CVEs
  28. 228.tastyigniter/tastyigniter4 CVEs
  29. 229.thorsten/phpMyFAQ4 CVEs
  30. 230.typo3/cms-frontend4 CVEs
  31. 231.wp-graphql/wp-graphql4 CVEs
  32. 232.wp-premium/gravityforms4 CVEs
  33. 233.yiisoft/yii4 CVEs
  34. 234.aimeos/ai-admin-graphql3 CVEs
  35. 235.apache-solr-for-typo3/solr3 CVEs
  36. 236.artesaos/seotools3 CVEs
  37. 237.aws/aws-sdk-php3 CVEs
  38. 238.badaso/core3 CVEs
  39. 239.bbpress/bbpress3 CVEs
  40. 240.cakephp/database3 CVEs
  41. 241.coreshop/core-shop3 CVEs
  42. 242.enhavo/enhavo-app3 CVEs
  43. 243.ezsystems/ezpublish-legacy3 CVEs
  44. 244.facade/ignition3 CVEs
  45. 245.fixpunkt/fp-newsletter3 CVEs
  46. 246.geshi/geshi3 CVEs
  47. 247.goalgorilla/open_social3 CVEs
  48. 248.google/protobuf3 CVEs
  49. 249.joomla/framework3 CVEs
  50. 250.knplabs/knp-snappy3 CVEs

Which Packagist packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →