Packagist Package Vulnerabilities

All 936 PHP / Composer packages with known CVEs, ranked by live CVE volume — 6,023 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 651.league/flysystem1 CVE
  2. 652.league/oauth2-server1 CVE
  3. 653.leantime/leantime1 CVE
  4. 654.lexik/jwt-authentication-bundle1 CVE
  5. 655.libreform/libreform1 CVE
  6. 656.liftkit/database1 CVE
  7. 657.lightsaml/lightsaml1 CVE
  8. 658.livehelperchat/livehelperchat1 CVE
  9. 659.livewire-filemanager/filemanager1 CVE
  10. 660.livewire/volt1 CVE
  11. 661.lms/routes1 CVE
  12. 662.localizationteam/l10nmgr1 CVE
  13. 663.lomkit/laravel-rest-api1 CVE
  14. 664.luracast/restler1 CVE
  15. 665.luyadev/yii-helpers1 CVE
  16. 666.maestroerror/php-heic-to-jpg1 CVE
  17. 667.magento/magento1ce1 CVE
  18. 668.magento/magento1ee1 CVE
  19. 669.mahocommerce/maho1 CVE
  20. 670.maikuolan/phpmussel1 CVE
  21. 671.mainwp/mainwp1 CVE
  22. 672.manogi/nova-tiptap1 CVE
  23. 673.marcwillmann/turn1 CVE
  24. 674.markhuot/craftql1 CVE
  25. 675.marshmallow/nova-tiptap1 CVE
  26. 676.matyhtf/framework1 CVE
  27. 677.mautic/grapes-js-builder-bundle1 CVE
  28. 678.mdanter/ecc1 CVE
  29. 679.mediawiki/abuse-filter1 CVE
  30. 680.mediawiki/data-transfer1 CVE
  31. 681.mediawiki/maps1 CVE
  32. 682.mediawiki/matomo1 CVE
  33. 683.mediawiki/semantic-media-wiki1 CVE
  34. 684.mehrwert/phpmyadmin1 CVE
  35. 685.melisplatform/melis-asset-manager1 CVE
  36. 686.melisplatform/melis-cms-slider1 CVE
  37. 687.melisplatform/melis-core1 CVE
  38. 688.melisplatform/melis-front1 CVE
  39. 689.mgallegos/laravel-jqgrid1 CVE
  40. 690.microsoft/microsoft-graph1 CVE
  41. 691.microsoft/microsoft-graph-core1 CVE
  42. 692.mikehaertl/php-shellcommand1 CVE
  43. 693.miraheze/ts-portal1 CVE
  44. 694.mittwald/typo3_forum1 CVE
  45. 695.mmc/ceselector1 CVE
  46. 696.mobiledetect/mobiledetectlib1 CVE
  47. 697.mojo42/jirafeau1 CVE
  48. 698.mongodb/mongodb1 CVE
  49. 699.mongodb/mongodb-extension1 CVE
  50. 700.mos/cimage1 CVE

Which Packagist packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →