Packagist Package Vulnerabilities

All 975 PHP / Composer packages with known CVEs, ranked by live CVE volume — 6,621 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 551.drupal/config_split1 CVE
  2. 552.drupal/currency1 CVE
  3. 553.drupal/email_tfa1 CVE
  4. 554.drupal/formatter_suite1 CVE
  5. 555.drupal/gdpr1 CVE
  6. 556.drupal/ignition1 CVE
  7. 557.drupal/json_field1 CVE
  8. 558.drupal/lightgallery1 CVE
  9. 559.drupal/link_field_display_mode_formatter1 CVE
  10. 560.drupal/matomo1 CVE
  11. 561.drupal/oauth2_client1 CVE
  12. 562.drupal/oauth2_server1 CVE
  13. 563.drupal/obfuscate1 CVE
  14. 564.drupal-pattern-lab/unified-twig-extensions1 CVE
  15. 565.drupal/plausible_tracking1 CVE
  16. 566.drupal/rapidoc_elements_field_formatter1 CVE
  17. 567.drupal/reverse_proxy_header1 CVE
  18. 568.drupal/sector1 CVE
  19. 569.drupal/simple_multistep1 CVE
  20. 570.drupal/simple_oauth1 CVE
  21. 571.drupal/spamspan1 CVE
  22. 572.drupal/tfa1 CVE
  23. 573.drupal/umami_analytics1 CVE
  24. 574.duncanmcclean/guest-entries1 CVE
  25. 575.ecodev/newsletter1 CVE
  26. 576.ectouch/ectouch1 CVE
  27. 577.ether/logs1 CVE
  28. 578.evoweb/sf-register1 CVE
  29. 579.ezsystems/ezplatform-admin-ui1 CVE
  30. 580.ezsystems/ezplatform-graphql1 CVE
  31. 581.fastly/magento21 CVE
  32. 582.fenom/fenom1 CVE
  33. 583.filament/forms1 CVE
  34. 584.filp/whoops1 CVE
  35. 585.fineuploader/php-traditional-server1 CVE
  36. 586.fisharebest/webtrees1 CVE
  37. 587.fixpunkt/fp-masterquiz1 CVE
  38. 588.flarum/flarum1 CVE
  39. 589.flarum/mentions1 CVE
  40. 590.flarum/nicknames1 CVE
  41. 591.flarum/sticky1 CVE
  42. 592.floriangaerber/magnesium1 CVE
  43. 593.fluidtypo3/vhs1 CVE
  44. 594.fof/byobu1 CVE
  45. 595.fof/oauth1 CVE
  46. 596.fof/pretty-mail1 CVE
  47. 597.fof/upload1 CVE
  48. 598.foodcoopshop/foodcoopshop1 CVE
  49. 599.fooman/tcpdf1 CVE
  50. 600.frappant/frp-form-answers1 CVE

Which Packagist packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →