Packagist Package Vulnerabilities

All 975 PHP / Composer packages with known CVEs, ranked by live CVE volume — 6,621 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 201.bytefury/crater4 CVEs
  2. 202.ckeditor/ckeditor4 CVEs
  3. 203.codeigniter4/shield4 CVEs
  4. 204.cotonti/cotonti4 CVEs
  5. 205.dcat/laravel-admin4 CVEs
  6. 206.drupal/ai4 CVEs
  7. 207.elmsln/haxcms4 CVEs
  8. 208.evolutioncms/evolution4 CVEs
  9. 209.ezsystems/ezplatform-kernel4 CVEs
  10. 210.ezyang/htmlpurifier4 CVEs
  11. 211.filament/tables4 CVEs
  12. 212.filegator/filegator4 CVEs
  13. 213.flarum/framework4 CVEs
  14. 214.froala/wysiwyg-editor4 CVEs
  15. 215.livewire/livewire4 CVEs
  16. 216.magento/product-community-edition4 CVEs
  17. 217.moonshine/moonshine4 CVEs
  18. 218.oro/platform4 CVEs
  19. 219.pheditor/pheditor4 CVEs
  20. 220.phppgadmin/phppgadmin4 CVEs
  21. 221.phpunit/phpunit4 CVEs
  22. 222.pixelfed/pixelfed4 CVEs
  23. 223.pontedilana/php-weasyprint4 CVEs
  24. 224.pyrocms/pyrocms4 CVEs
  25. 225.react/http4 CVEs
  26. 226.reportico-web/reportico4 CVEs
  27. 227.silverstripe/admin4 CVEs
  28. 228.simplesamlphp/saml2-legacy4 CVEs
  29. 229.sjbr/sr-feuser-register4 CVEs
  30. 230.tastyigniter/tastyigniter4 CVEs
  31. 231.thorsten/phpMyFAQ4 CVEs
  32. 232.typo3/cms-frontend4 CVEs
  33. 233.wp-graphql/wp-graphql4 CVEs
  34. 234.wp-premium/gravityforms4 CVEs
  35. 235.yiisoft/yii4 CVEs
  36. 236.aimeos/ai-admin-graphql3 CVEs
  37. 237.apache-solr-for-typo3/solr3 CVEs
  38. 238.artesaos/seotools3 CVEs
  39. 239.aws/aws-sdk-php3 CVEs
  40. 240.badaso/core3 CVEs
  41. 241.bbpress/bbpress3 CVEs
  42. 242.cakephp/database3 CVEs
  43. 243.coreshop/core-shop3 CVEs
  44. 244.enhavo/enhavo-app3 CVEs
  45. 245.ezsystems/ezpublish-legacy3 CVEs
  46. 246.facade/ignition3 CVEs
  47. 247.fixpunkt/fp-newsletter3 CVEs
  48. 248.geshi/geshi3 CVEs
  49. 249.goalgorilla/open_social3 CVEs
  50. 250.google/protobuf3 CVEs

Which Packagist packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →