Packagist Package Vulnerabilities

All 975 PHP / Composer packages with known CVEs, ranked by live CVE volume — 6,621 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 951.wpcloud/wp-stateless1 CVE
  2. 952.wp-coding-standards/wpcs1 CVE
  3. 953.wpmetabox/meta-box1 CVE
  4. 954.xataface/xataface1 CVE
  5. 955.xpressengine/xpressengine1 CVE
  6. 956.yab/quarx1 CVE
  7. 957.yansongda/pay1 CVE
  8. 958.yidashi/yii2cmf1 CVE
  9. 959.yii2mod/yii2-cms1 CVE
  10. 960.yiisoft/yii2-elasticsearch1 CVE
  11. 961.yikesinc/yikes-inc-easy-mailchimp-extender1 CVE
  12. 962.yoast/duplicate-post1 CVE
  13. 963.zendesk/zendesk_api_client_php1 CVE
  14. 964.zendframework/zend-cache1 CVE
  15. 965.zendframework/zend-crypt1 CVE
  16. 966.zendframework/zend-diactoros1 CVE
  17. 967.zendframework/zend-http1 CVE
  18. 968.zendframework/zend-mail1 CVE
  19. 969.zendframework/zendxml1 CVE
  20. 970.zenstruck/collection1 CVE
  21. 971.zetacomponents/mail1 CVE
  22. 972.zfcampus/zf-apigility-doctrine1 CVE
  23. 973.zf-commons/zfc-user1 CVE
  24. 974.z-push/z-push-dev1 CVE
  25. 975.zumba/json-serializer1 CVE

Which Packagist packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →