Packagist Package Vulnerabilities

All 975 PHP / Composer packages with known CVEs, ranked by live CVE volume — 6,621 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 451.andreapollastri/cipi1 CVE
  2. 452.andrewhaine/silverstripe-form-capture1 CVE
  3. 453.aoe/restler1 CVE
  4. 454.apache/thrift1 CVE
  5. 455.api-platform/hal1 CVE
  6. 456.api-platform/json-api1 CVE
  7. 457.arc/web1 CVE
  8. 458.area17/twill1 CVE
  9. 459.athlon1600/youtube-downloader1 CVE
  10. 460.aureuserp/aureuserp1 CVE
  11. 461.auth0/symfony1 CVE
  12. 462.auth0/wordpress1 CVE
  13. 463.automattic/jetpack1 CVE
  14. 464.awesome-support/awesome-support1 CVE
  15. 465.ayacoo/redirect-tab1 CVE
  16. 466.b13/seo_basics1 CVE
  17. 467.backpack/filemanager1 CVE
  18. 468.barrelstrength/sprout-base-email1 CVE
  19. 469.barrelstrength/sprout-forms1 CVE
  20. 470.barryvdh/laravel-translation-manager1 CVE
  21. 471.barzahlen/barzahlen-php1 CVE
  22. 472.bcit-ci/codeigniter1 CVE
  23. 473.bcosca/fatfree1 CVE
  24. 474.bedita/bedita1 CVE
  25. 475.bednee/cooluri1 CVE
  26. 476.bigfork/silverstripe-form-capture1 CVE
  27. 477.billabear/billabear1 CVE
  28. 478.binarytorch/larecipe1 CVE
  29. 479.bk2k/bootstrap-package1 CVE
  30. 480.blueimp/jquery-file-upload1 CVE
  31. 481.bmarshall511/wordpress_zero_spam1 CVE
  32. 482.brightlocal/phpwhois1 CVE
  33. 483.brotkrueml/schema1 CVE
  34. 484.brotkrueml/typo3-matomo-integration1 CVE
  35. 485.bugsnag/bugsnag-laravel1 CVE
  36. 486.bvbmedia/multishop1 CVE
  37. 487.cadmium-org/cadmium-cms1 CVE
  38. 488.cakephp/authentication1 CVE
  39. 489.cakephp/debug_kit1 CVE
  40. 490.cakephp/queue1 CVE
  41. 491.cardgate/magento21 CVE
  42. 492.cardgate/woocommerce1 CVE
  43. 493.catfan/medoo1 CVE
  44. 494.cesargb/laravel-magiclink1 CVE
  45. 495.cesnet/simplesamlphp-module-proxystatistics1 CVE
  46. 496.chamilo/chamilo-lms1 CVE
  47. 497.chriskacerguis/codeigniter-restserver1 CVE
  48. 498.chrome-php/chrome1 CVE
  49. 499.civicrm/civicrm-core1 CVE
  50. 500.codeception/codeception1 CVE

Which Packagist packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →