Packagist Package Vulnerabilities

All 975 PHP / Composer packages with known CVEs, ranked by live CVE volume — 6,621 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 351.joomla/filter2 CVEs
  2. 352.joomla/joomla-platform2 CVEs
  3. 353.jsdecena/laracom2 CVEs
  4. 354.khodakhah/nodcms2 CVEs
  5. 355.kitodo/presentation2 CVEs
  6. 356.koillection/koillection2 CVEs
  7. 357.laminas/laminas-diactoros2 CVEs
  8. 358.laravel/reverb2 CVEs
  9. 359.latte/latte2 CVEs
  10. 360.league/flysystem2 CVEs
  11. 361.leantime/leantime2 CVEs
  12. 362.magneto/core2 CVEs
  13. 363.maximebf/debugbar2 CVEs
  14. 364.melisplatform/melis-cms2 CVEs
  15. 365.miniorange/miniorange-saml2 CVEs
  16. 366.miraheze/ts-portal2 CVEs
  17. 367.mix/mix2 CVEs
  18. 368.neuron-core/neuron-ai2 CVEs
  19. 369.noumo/easyii2 CVEs
  20. 370.novosga/novosga2 CVEs
  21. 371.opensolutions/vimbadmin2 CVEs
  22. 372.open-web-analytics/open-web-analytics2 CVEs
  23. 373.oro/customer-portal2 CVEs
  24. 374.oxid-esales/oxideshop-ce2 CVEs
  25. 375.packbackbooks/lti-1-3-php-library2 CVEs
  26. 376.passbolt/passbolt_api2 CVEs
  27. 377.phenx/php-svg-lib2 CVEs
  28. 378.phpfastcache/phpfastcache2 CVEs
  29. 379.poweradmin/poweradmin2 CVEs
  30. 380.prestashop/blockreassurance2 CVEs
  31. 381.ptrofimov/beanstalk_console2 CVEs
  32. 382.rhukster/dom-sanitizer2 CVEs
  33. 383.s9y/serendipity2 CVEs
  34. 384.sabre/dav2 CVEs
  35. 385.s-cart/core2 CVEs
  36. 386.s-cart/s-cart2 CVEs
  37. 387.setasign/fpdi2 CVEs
  38. 388.shuchkin/simplexlsx2 CVEs
  39. 389.silverstripe/userforms2 CVEs
  40. 390.simogeo/filemanager2 CVEs
  41. 391.simplesamlphp/simplesamlphp-module-casserver2 CVEs
  42. 392.simplesamlphp/simplesamlphp-module-infocard2 CVEs
  43. 393.simplesamlphp/xml-security2 CVEs
  44. 394.sjbr/sr-freecap2 CVEs
  45. 395.slim/slim2 CVEs
  46. 396.spatie/laravel-medialibrary2 CVEs
  47. 397.spipu/html2pdf2 CVEs
  48. 398.starcitizentools/tabber-neue2 CVEs
  49. 399.swiftmailer/swiftmailer2 CVEs
  50. 400.sylius/grid-bundle2 CVEs

Which Packagist packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →