Packagist Package Vulnerabilities

All 975 PHP / Composer packages with known CVEs, ranked by live CVE volume — 6,621 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 401.sylius/mollie-plugin2 CVEs
  2. 402.symfony/http-client2 CVEs
  3. 403.symfony/polyfill2 CVEs
  4. 404.symfony/process2 CVEs
  5. 405.symfony/runtime2 CVEs
  6. 406.symfony/twig-bridge2 CVEs
  7. 407.symfony/validator2 CVEs
  8. 408.symfony/web-profiler-bundle2 CVEs
  9. 409.symphonycms/symphony-22 CVEs
  10. 410.t3/dce2 CVEs
  11. 411.tikiwiki/tiki-manager2 CVEs
  12. 412.tltneon/lgsl2 CVEs
  13. 413.topthink/think2 CVEs
  14. 414.topthink/thinkphp2 CVEs
  15. 415.typo3/cms-beuser2 CVEs
  16. 416.typo3/cms-dashboard2 CVEs
  17. 417.typo3/cms-indexed-search2 CVEs
  18. 418.typo3/cms-workspaces2 CVEs
  19. 419.typo3fluid/fluid2 CVEs
  20. 420.typo3/phar-stream-wrapper2 CVEs
  21. 421.verbb/image-resizer2 CVEs
  22. 422.verbb/knock-knock2 CVEs
  23. 423.vufind/vufind2 CVEs
  24. 424.web-auth/webauthn-lib2 CVEs
  25. 425.webonyx/graphql-php2 CVEs
  26. 426.web-tp3/wec_map2 CVEs
  27. 427.yiisoft/yii2-authclient2 CVEs
  28. 428.yiisoft/yii2-gii2 CVEs
  29. 429.yiisoft/yii2-redis2 CVEs
  30. 430.yoast-seo-for-typo3/yoast_seo2 CVEs
  31. 431.yuan1994/tpadmin2 CVEs
  32. 432.zbateson/mail-mime-parser2 CVEs
  33. 433.zendframework/zend-db2 CVEs
  34. 434.adaptcms/adaptcms1 CVE
  35. 435.aheinze/cockpit1 CVE
  36. 436.aimeos/ai-admin-jsonadm1 CVE
  37. 437.aimeos/ai-cms-grapesjs1 CVE
  38. 438.aimeos/aimeos-laravel1 CVE
  39. 439.aimeos/aimeos-typo31 CVE
  40. 440.aimeos/pagible1 CVE
  41. 441.airesvsg/acf-to-rest-api1 CVE
  42. 442.akaunting/akaunting1 CVE
  43. 443.almirhodzic/nova-toggle-51 CVE
  44. 444.altcha-org/altcha1 CVE
  45. 445.alt-design/alt-redirect1 CVE
  46. 446.amazing/media2click1 CVE
  47. 447.ameos/ameos_tarteaucitron1 CVE
  48. 448.amphp/artax1 CVE
  49. 449.amphp/http1 CVE
  50. 450.amphp/http-client1 CVE

Which Packagist packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →