Packagist Package Vulnerabilities

All 948 PHP / Composer packages with known CVEs, ranked by live CVE volume — 6,292 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 451.barzahlen/barzahlen-php1 CVE
  2. 452.bcit-ci/codeigniter1 CVE
  3. 453.bcosca/fatfree1 CVE
  4. 454.bedita/bedita1 CVE
  5. 455.bednee/cooluri1 CVE
  6. 456.bigfork/silverstripe-form-capture1 CVE
  7. 457.billabear/billabear1 CVE
  8. 458.binarytorch/larecipe1 CVE
  9. 459.bk2k/bootstrap-package1 CVE
  10. 460.blueimp/jquery-file-upload1 CVE
  11. 461.bmarshall511/wordpress_zero_spam1 CVE
  12. 462.brightlocal/phpwhois1 CVE
  13. 463.brotkrueml/schema1 CVE
  14. 464.brotkrueml/typo3-matomo-integration1 CVE
  15. 465.bugsnag/bugsnag-laravel1 CVE
  16. 466.bvbmedia/multishop1 CVE
  17. 467.cadmium-org/cadmium-cms1 CVE
  18. 468.cakephp/authentication1 CVE
  19. 469.cakephp/database1 CVE
  20. 470.cardgate/magento21 CVE
  21. 471.cardgate/woocommerce1 CVE
  22. 472.catfan/medoo1 CVE
  23. 473.causal/oidc1 CVE
  24. 474.cesnet/simplesamlphp-module-proxystatistics1 CVE
  25. 475.chriskacerguis/codeigniter-restserver1 CVE
  26. 476.chrome-php/chrome1 CVE
  27. 477.civicrm/civicrm-core1 CVE
  28. 478.clickstorm/cs-seo1 CVE
  29. 479.codeception/codeception1 CVE
  30. 480.codingms/modules1 CVE
  31. 481.commerceteam/commerce1 CVE
  32. 482.contao/comments-bundle1 CVE
  33. 483.contao-components/mediaelement1 CVE
  34. 484.contao/listing-bundle1 CVE
  35. 485.contao/managed-edition1 CVE
  36. 486.corveda/phpsandbox1 CVE
  37. 487.cosenary/instagram1 CVE
  38. 488.co-stack/fal_sftp1 CVE
  39. 489.couleurcitron/tarteaucitron-wp1 CVE
  40. 490.craftcms/aws-s31 CVE
  41. 491.craftcms/azure-blob1 CVE
  42. 492.craftcms/composer1 CVE
  43. 493.craftcms/craft1 CVE
  44. 494.craftcms/google-cloud1 CVE
  45. 495.craftcms/webhooks1 CVE
  46. 496.cuyz/valinor1 CVE
  47. 497.czim/file-handling1 CVE
  48. 498.czproject/git-php1 CVE
  49. 499.damienharper/auditor-bundle1 CVE
  50. 500.dapphp/securimage1 CVE

Which Packagist packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →