Packagist Package Vulnerabilities

All 919 PHP / Composer packages with known CVEs, ranked by live CVE volume — 5,804 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 601.islandora/crayfish1 CVE
  2. 602.ivankristianto/phpwhois1 CVE
  3. 603.jackalope/jackalope-doctrine-dbal1 CVE
  4. 604.jambagecom/div20071 CVE
  5. 605.jasig/phpcas1 CVE
  6. 606.jcbrand/converse.js1 CVE
  7. 607.joedolson/my-calendar1 CVE
  8. 608.joelbutcher/socialstream1 CVE
  9. 609.johnbillion/query-monitor1 CVE
  10. 610.joomla/application1 CVE
  11. 611.joomla/database1 CVE
  12. 612.joomla/filesystem1 CVE
  13. 613.joomla/input1 CVE
  14. 614.joomla/session1 CVE
  15. 615.joyqi/hyper-down1 CVE
  16. 616.jsmitty12/phpwhois1 CVE
  17. 617.jweiland/events21 CVE
  18. 618.jweiland/kk-downloader1 CVE
  19. 619.kantorge/yaffa1 CVE
  20. 620.kazist/phpwhois1 CVE
  21. 621.kelvinmo/simplejwt1 CVE
  22. 622.kelvinmo/simplexrd1 CVE
  23. 623.KnpLabs/knp-snappy1 CVE
  24. 624.kohana/core1 CVE
  25. 625.koillection/koillection1 CVE
  26. 626.kreait/firebase-php1 CVE
  27. 627.kumbiaphp/kumbiapp1 CVE
  28. 628.la-haute-societe/tcpdf1 CVE
  29. 629.laktak/hjson1 CVE
  30. 630.laminas/laminas-form1 CVE
  31. 631.laminas/laminas-http1 CVE
  32. 632.laravel/fortify1 CVE
  33. 633.laravel/laravel1 CVE
  34. 634.laravel/passport1 CVE
  35. 635.laravel/pulse1 CVE
  36. 636.lara-zeus/artemis1 CVE
  37. 637.lara-zeus/dynamic-dashboard1 CVE
  38. 638.lavitto/typo3-form-to-database1 CVE
  39. 639.lcobucci/jwt1 CVE
  40. 640.league/flysystem1 CVE
  41. 641.league/oauth2-server1 CVE
  42. 642.leantime/leantime1 CVE
  43. 643.lexik/jwt-authentication-bundle1 CVE
  44. 644.libreform/libreform1 CVE
  45. 645.liftkit/database1 CVE
  46. 646.lightsaml/lightsaml1 CVE
  47. 647.livehelperchat/livehelperchat1 CVE
  48. 648.livewire-filemanager/filemanager1 CVE
  49. 649.livewire/volt1 CVE
  50. 650.lms/routes1 CVE

Which Packagist packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →