Packagist Package Vulnerabilities

All 970 PHP / Composer packages with known CVEs, ranked by live CVE volume — 6,583 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 401.symfony/process2 CVEs
  2. 402.symfony/runtime2 CVEs
  3. 403.symfony/twig-bridge2 CVEs
  4. 404.symfony/validator2 CVEs
  5. 405.symphonycms/symphony-22 CVEs
  6. 406.t3/dce2 CVEs
  7. 407.tikiwiki/tiki-manager2 CVEs
  8. 408.tltneon/lgsl2 CVEs
  9. 409.topthink/think2 CVEs
  10. 410.topthink/thinkphp2 CVEs
  11. 411.typo3/cms-beuser2 CVEs
  12. 412.typo3/cms-dashboard2 CVEs
  13. 413.typo3/cms-indexed-search2 CVEs
  14. 414.typo3/cms-workspaces2 CVEs
  15. 415.typo3fluid/fluid2 CVEs
  16. 416.typo3/phar-stream-wrapper2 CVEs
  17. 417.verbb/image-resizer2 CVEs
  18. 418.verbb/knock-knock2 CVEs
  19. 419.vufind/vufind2 CVEs
  20. 420.web-auth/webauthn-lib2 CVEs
  21. 421.webonyx/graphql-php2 CVEs
  22. 422.web-tp3/wec_map2 CVEs
  23. 423.yiisoft/yii2-authclient2 CVEs
  24. 424.yiisoft/yii2-gii2 CVEs
  25. 425.yiisoft/yii2-redis2 CVEs
  26. 426.yoast-seo-for-typo3/yoast_seo2 CVEs
  27. 427.yuan1994/tpadmin2 CVEs
  28. 428.zbateson/mail-mime-parser2 CVEs
  29. 429.zendframework/zend-db2 CVEs
  30. 430.adaptcms/adaptcms1 CVE
  31. 431.aheinze/cockpit1 CVE
  32. 432.aimeos/ai-admin-jsonadm1 CVE
  33. 433.aimeos/ai-cms-grapesjs1 CVE
  34. 434.aimeos/aimeos-laravel1 CVE
  35. 435.aimeos/aimeos-typo31 CVE
  36. 436.aimeos/pagible1 CVE
  37. 437.airesvsg/acf-to-rest-api1 CVE
  38. 438.akaunting/akaunting1 CVE
  39. 439.almirhodzic/nova-toggle-51 CVE
  40. 440.altcha-org/altcha1 CVE
  41. 441.alt-design/alt-redirect1 CVE
  42. 442.amazing/media2click1 CVE
  43. 443.ameos/ameos_tarteaucitron1 CVE
  44. 444.amphp/artax1 CVE
  45. 445.amphp/http1 CVE
  46. 446.amphp/http-client1 CVE
  47. 447.andreapollastri/cipi1 CVE
  48. 448.andrewhaine/silverstripe-form-capture1 CVE
  49. 449.aoe/restler1 CVE
  50. 450.apache/thrift1 CVE

Which Packagist packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →