Packagist Package Vulnerabilities

All 975 PHP / Composer packages with known CVEs, ranked by live CVE volume — 6,621 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 651.joomla/input1 CVE
  2. 652.joomla/session1 CVE
  3. 653.joyqi/hyper-down1 CVE
  4. 654.jsmitty12/phpwhois1 CVE
  5. 655.jweiland/events21 CVE
  6. 656.jweiland/kk-downloader1 CVE
  7. 657.kantorge/yaffa1 CVE
  8. 658.kazist/phpwhois1 CVE
  9. 659.kelvinmo/simplejwt1 CVE
  10. 660.kelvinmo/simplexrd1 CVE
  11. 661.KnpLabs/knp-snappy1 CVE
  12. 662.kohana/core1 CVE
  13. 663.kreait/firebase-php1 CVE
  14. 664.kumbiaphp/kumbiapp1 CVE
  15. 665.kunstmaan/bundles-cms1 CVE
  16. 666.kunstmaan/media-bundle1 CVE
  17. 667.la-haute-societe/tcpdf1 CVE
  18. 668.laktak/hjson1 CVE
  19. 669.laminas/laminas-form1 CVE
  20. 670.laminas/laminas-http1 CVE
  21. 671.laravel/fortify1 CVE
  22. 672.laravel/laravel1 CVE
  23. 673.laravel/passport1 CVE
  24. 674.laravel/pulse1 CVE
  25. 675.lara-zeus/artemis1 CVE
  26. 676.lara-zeus/dynamic-dashboard1 CVE
  27. 677.lavitto/typo3-form-to-database1 CVE
  28. 678.lcobucci/jwt1 CVE
  29. 679.league/oauth2-server1 CVE
  30. 680.lexik/jwt-authentication-bundle1 CVE
  31. 681.libreform/libreform1 CVE
  32. 682.liftkit/database1 CVE
  33. 683.lightsaml/lightsaml1 CVE
  34. 684.livehelperchat/livehelperchat1 CVE
  35. 685.livewire-filemanager/filemanager1 CVE
  36. 686.livewire/volt1 CVE
  37. 687.lms/routes1 CVE
  38. 688.localizationteam/l10nmgr1 CVE
  39. 689.lomkit/laravel-rest-api1 CVE
  40. 690.luracast/restler1 CVE
  41. 691.luyadev/yii-helpers1 CVE
  42. 692.maatwebsite/excel1 CVE
  43. 693.maestroerror/php-heic-to-jpg1 CVE
  44. 694.magento/magento1ce1 CVE
  45. 695.magento/magento1ee1 CVE
  46. 696.mahocommerce/maho1 CVE
  47. 697.maikuolan/phpmussel1 CVE
  48. 698.mainwp/mainwp1 CVE
  49. 699.manogi/nova-tiptap1 CVE
  50. 700.marcwillmann/turn1 CVE

Which Packagist packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →