Packagist Package Vulnerabilities

All 935 PHP / Composer packages with known CVEs, ranked by live CVE volume — 6,018 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 451.bigfork/silverstripe-form-capture1 CVE
  2. 452.billabear/billabear1 CVE
  3. 453.binarytorch/larecipe1 CVE
  4. 454.bk2k/bootstrap-package1 CVE
  5. 455.blueimp/jquery-file-upload1 CVE
  6. 456.bmarshall511/wordpress_zero_spam1 CVE
  7. 457.brightlocal/phpwhois1 CVE
  8. 458.brotkrueml/schema1 CVE
  9. 459.brotkrueml/typo3-matomo-integration1 CVE
  10. 460.bugsnag/bugsnag-laravel1 CVE
  11. 461.bvbmedia/multishop1 CVE
  12. 462.cadmium-org/cadmium-cms1 CVE
  13. 463.cakephp/authentication1 CVE
  14. 464.cakephp/database1 CVE
  15. 465.cardgate/magento21 CVE
  16. 466.cardgate/woocommerce1 CVE
  17. 467.catfan/medoo1 CVE
  18. 468.causal/oidc1 CVE
  19. 469.cesnet/simplesamlphp-module-proxystatistics1 CVE
  20. 470.chriskacerguis/codeigniter-restserver1 CVE
  21. 471.chrome-php/chrome1 CVE
  22. 472.civicrm/civicrm-core1 CVE
  23. 473.clickstorm/cs-seo1 CVE
  24. 474.codeception/codeception1 CVE
  25. 475.codingms/modules1 CVE
  26. 476.commerceteam/commerce1 CVE
  27. 477.contao/comments-bundle1 CVE
  28. 478.contao-components/mediaelement1 CVE
  29. 479.contao/listing-bundle1 CVE
  30. 480.contao/managed-edition1 CVE
  31. 481.corveda/phpsandbox1 CVE
  32. 482.cosenary/instagram1 CVE
  33. 483.co-stack/fal_sftp1 CVE
  34. 484.couleurcitron/tarteaucitron-wp1 CVE
  35. 485.craftcms/aws-s31 CVE
  36. 486.craftcms/azure-blob1 CVE
  37. 487.craftcms/composer1 CVE
  38. 488.craftcms/craft1 CVE
  39. 489.craftcms/google-cloud1 CVE
  40. 490.craftcms/webhooks1 CVE
  41. 491.cuyz/valinor1 CVE
  42. 492.czim/file-handling1 CVE
  43. 493.czproject/git-php1 CVE
  44. 494.damienharper/auditor-bundle1 CVE
  45. 495.dapphp/securimage1 CVE
  46. 496.darylldoyle/safe-svg1 CVE
  47. 497.datatables/datatables1 CVE
  48. 498.david-garcia/phpwhois1 CVE
  49. 499.dbrisinajumi/d2files1 CVE
  50. 500.dedoc/scramble1 CVE

Which Packagist packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →