Packagist Package Vulnerabilities

All 975 PHP / Composer packages with known CVEs, ranked by live CVE volume — 6,621 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 301.aimeos/ai-controller-frontend2 CVEs
  2. 302.aimeos/aimeos-core2 CVEs
  3. 303.akeneo/pim-community-dev2 CVEs
  4. 304.alexusmai/laravel-file-manager2 CVEs
  5. 305.apereo/phpcas2 CVEs
  6. 306.api-platform/graphql2 CVEs
  7. 307.athlon1600/php-proxy2 CVEs
  8. 308.athlon1600/php-proxy-app2 CVEs
  9. 309.austintoddj/canvas2 CVEs
  10. 310.bacula-web/bacula-web2 CVEs
  11. 311.bolt/core2 CVEs
  12. 312.born05/craft-twofactorauthentication2 CVEs
  13. 313.causal/oidc2 CVEs
  14. 314.cecil/cecil2 CVEs
  15. 315.clickstorm/cs-seo2 CVEs
  16. 316.codeigniter/framework2 CVEs
  17. 317.components/jquery2 CVEs
  18. 318.contao/comments-bundle2 CVEs
  19. 319.cpsit/typo3-mailqueue2 CVEs
  20. 320.datahihi1/tiny-env2 CVEs
  21. 321.derhansen/sf_event_mgt2 CVEs
  22. 322.dmk/webkitpdf2 CVEs
  23. 323.drupal/civictheme2 CVEs
  24. 324.drupal/google_tag2 CVEs
  25. 325.drupal/quick_node_block2 CVEs
  26. 326.easycorp/easyadmin-bundle2 CVEs
  27. 327.elijaa/phpmemcacheadmin2 CVEs
  28. 328.encore/laravel-admin2 CVEs
  29. 329.erusev/parsedown2 CVEs
  30. 330.exceedone/exment2 CVEs
  31. 331.exceedone/laravel-admin2 CVEs
  32. 332.filament/actions2 CVEs
  33. 333.filament/infolists2 CVEs
  34. 334.firebase/php-jwt2 CVEs
  35. 335.friendsofsymfony1/symfony12 CVEs
  36. 336.georgringer/news2 CVEs
  37. 337.getkirby/kirby2 CVEs
  38. 338.getkirby/panel2 CVEs
  39. 339.helloxz/imgurl2 CVEs
  40. 340.ibexa/admin-ui2 CVEs
  41. 341.illuminate/auth2 CVEs
  42. 342.illuminate/database2 CVEs
  43. 343.impresspages/impresspages2 CVEs
  44. 344.ipl/web2 CVEs
  45. 345.james-heinrich/getid32 CVEs
  46. 346.james-heinrich/phpthumb2 CVEs
  47. 347.jbartels/wec-map2 CVEs
  48. 348.jleehr/canto-saas-api2 CVEs
  49. 349.johnbillion/wp-crontrol2 CVEs
  50. 350.joomla/archive2 CVEs

Which Packagist packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →