Vulnerable packages
Packages
Reverse lookup: every package coordinate seen in a CVE's affected list. Click a row to see every CVE that mentions it — with affected version range, fixed-in version, severity, and KEV status.
Sort by:
| # | Ecosystem | Package | CVEs | Latest CVE | purl |
|---|---|---|---|---|---|
| 1 | composer | moodle/moodle | 437 | Feb 21, 2026 | pkg:composer/moodle/moodle |
| 2 | composer | magento/community-edition | 355 | Oct 14, 2025 | pkg:composer/magento/community-edition |
| 3 | composer | magento/project-community-edition | 161 | Oct 14, 2025 | pkg:composer/magento/project-community-edition |
| 4 | composer | wwbn/avideo | 133 | May 11, 2026 | pkg:composer/wwbn/avideo |
| 5 | composer | dolibarr/dolibarr | 123 | May 3, 2026 | pkg:composer/dolibarr/dolibarr |
| 6 | composer | pimcore/pimcore | 119 | Apr 27, 2026 | pkg:composer/pimcore/pimcore |
| 7 | composer | typo3/cms | 116 | Feb 7, 2023 | pkg:composer/typo3/cms |
| 8 | composer | phpmyadmin/phpmyadmin | 107 | Jan 23, 2025 | pkg:composer/phpmyadmin/phpmyadmin |
| 9 | composer | microweber/microweber | 105 | Feb 5, 2026 | pkg:composer/microweber/microweber |
| 10 | composer | librenms/librenms | 99 | May 8, 2026 | pkg:composer/librenms/librenms |
| 11 | composer | craftcms/cms | 98 | May 12, 2026 | pkg:composer/craftcms/cms |
| 12 | composer | drupal/core | 91 | Nov 18, 2025 | pkg:composer/drupal/core |
| 13 | composer | thorsten/phpmyfaq | 85 | Apr 2, 2026 | pkg:composer/thorsten/phpmyfaq |
| 14 | composer | typo3/cms-core | 85 | Jan 13, 2026 | pkg:composer/typo3/cms-core |
| 15 | composer | concrete5/concrete5 | 73 | Mar 24, 2026 | pkg:composer/concrete5/concrete5 |
| 16 | composer | drupal/drupal | 68 | Dec 9, 2024 | pkg:composer/drupal/drupal |
| 17 | composer | symfony/symfony | 65 | Jan 28, 2026 | pkg:composer/symfony/symfony |
| 18 | composer | getgrav/grav | 64 | May 12, 2026 | pkg:composer/getgrav/grav |
| 19 | composer | mantisbt/mantisbt | 64 | May 20, 2026 | pkg:composer/mantisbt/mantisbt |
| 20 | composer | baserproject/basercms | 56 | Mar 31, 2026 | pkg:composer/baserproject/basercms |
| 21 | composer | mautic/core | 49 | Feb 24, 2026 | pkg:composer/mautic/core |
| 22 | composer | froxlor/froxlor | 47 | Apr 23, 2026 | pkg:composer/froxlor/froxlor |
| 23 | composer | snipe/snipe-it | 46 | May 8, 2026 | pkg:composer/snipe/snipe-it |
| 24 | composer | intelliants/subrion | 42 | Feb 2, 2026 | pkg:composer/intelliants/subrion |
| 25 | composer | nilsteampassnet/teampass | 42 | Dec 30, 2024 | pkg:composer/nilsteampassnet/teampass |
| 26 | composer | showdoc/showdoc | 42 | Apr 25, 2026 | pkg:composer/showdoc/showdoc |
| 27 | composer | shopware/platform | 41 | Mar 11, 2026 | pkg:composer/shopware/platform |
| 28 | composer | admidio/admidio | 40 | May 7, 2026 | pkg:composer/admidio/admidio |
| 29 | composer | silverstripe/framework | 36 | Apr 10, 2025 | pkg:composer/silverstripe/framework |
| 30 | composer | getkirby/cms | 35 | May 9, 2026 | pkg:composer/getkirby/cms |
| 31 | composer | ci4-cms-erp/ci4ms | 33 | May 7, 2026 | pkg:composer/ci4-cms-erp/ci4ms |
| 32 | composer | shopware/core | 33 | Mar 11, 2026 | pkg:composer/shopware/core |
| 33 | composer | contao/core-bundle | 31 | Nov 25, 2025 | pkg:composer/contao/core-bundle |
| 34 | composer | prestashop/prestashop | 31 | May 14, 2026 | pkg:composer/prestashop/prestashop |
| 35 | composer | statamic/cms | 31 | May 12, 2026 | pkg:composer/statamic/cms |
| 36 | composer | mediawiki/core | 28 | Oct 9, 2023 | pkg:composer/mediawiki/core |
| 37 | composer | centreon/centreon | 27 | Apr 1, 2024 | pkg:composer/centreon/centreon |
| 38 | composer | phpoffice/phpspreadsheet | 27 | May 12, 2026 | pkg:composer/phpoffice/phpspreadsheet |
| 39 | composer | funadmin/funadmin | 26 | May 4, 2026 | pkg:composer/funadmin/funadmin |
| 40 | composer | cockpit-hq/cockpit | 25 | Apr 29, 2026 | pkg:composer/cockpit-hq/cockpit |
| 41 | composer | magento/core | 24 | Jul 22, 2020 | pkg:composer/magento/core |
| 42 | composer | contao/contao | 23 | Aug 28, 2025 | pkg:composer/contao/contao |
| 43 | composer | phpoffice/phpexcel | 23 | Feb 3, 2025 | pkg:composer/phpoffice/phpexcel |
| 44 | composer | remdex/livehelperchat | 23 | Feb 28, 2024 | pkg:composer/remdex/livehelperchat |
| 45 | composer | shopware/shopware | 23 | Jan 14, 2026 | pkg:composer/shopware/shopware |
| 46 | composer | grumpydictator/firefly-iii | 22 | Jun 17, 2024 | pkg:composer/grumpydictator/firefly-iii |
| 47 | composer | october/system | 22 | Apr 21, 2026 | pkg:composer/october/system |
| 48 | composer | sylius/sylius | 22 | Mar 10, 2026 | pkg:composer/sylius/sylius |
| 49 | composer | tribalsystems/zenario | 22 | Oct 2, 2024 | pkg:composer/tribalsystems/zenario |
| 50 | composer | typo3/cms-backend | 22 | Apr 21, 2026 | pkg:composer/typo3/cms-backend |
| 51 | composer | feehi/cms | 21 | Apr 6, 2026 | pkg:composer/feehi/cms |
| 52 | composer | openmage/magento-lts | 21 | Apr 20, 2026 | pkg:composer/openmage/magento-lts |
| 53 | composer | phpmyfaq/phpmyfaq | 21 | Apr 2, 2026 | pkg:composer/phpmyfaq/phpmyfaq |
| 54 | composer | bagisto/bagisto | 20 | Apr 21, 2026 | pkg:composer/bagisto/bagisto |
| 55 | composer | craftcms/commerce | 19 | Apr 13, 2026 | pkg:composer/craftcms/commerce |
| 56 | composer | topthink/framework | 19 | Aug 5, 2025 | pkg:composer/topthink/framework |
| 57 | composer | facturascripts/facturascripts | 18 | May 18, 2026 | pkg:composer/facturascripts/facturascripts |
| 58 | composer | forkcms/forkcms | 18 | Aug 12, 2022 | pkg:composer/forkcms/forkcms |
| 59 | composer | genix/cms | 18 | Mar 3, 2022 | pkg:composer/genix/cms |
| 60 | composer | devcode-it/openstamanager | 17 | May 4, 2026 | pkg:composer/devcode-it/openstamanager |
| 61 | composer | francoisjacquet/rosariosis | 17 | Apr 1, 2024 | pkg:composer/francoisjacquet/rosariosis |
| 62 | composer | opencart/opencart | 17 | Dec 18, 2024 | pkg:composer/opencart/opencart |
| 63 | composer | simplesamlphp/simplesamlphp | 17 | Apr 21, 2020 | pkg:composer/simplesamlphp/simplesamlphp |
| 64 | composer | symfony/security | 17 | May 13, 2021 | pkg:composer/symfony/security |
| 65 | composer | yetiforce/yetiforce-crm | 17 | Feb 16, 2024 | pkg:composer/yetiforce/yetiforce-crm |
| 66 | composer | yeswiki/yeswiki | 16 | May 7, 2026 | pkg:composer/yeswiki/yeswiki |
| 67 | composer | bolt/bolt | 15 | Jul 3, 2025 | pkg:composer/bolt/bolt |
| 68 | composer | codeigniter4/framework | 15 | Jul 28, 2025 | pkg:composer/codeigniter4/framework |
| 69 | composer | phpbb/phpbb | 15 | Nov 2, 2023 | pkg:composer/phpbb/phpbb |
| 70 | composer | smarty/smarty | 15 | May 28, 2024 | pkg:composer/smarty/smarty |
| 71 | composer | studio-42/elfinder | 15 | May 11, 2026 | pkg:composer/studio-42/elfinder |
| 72 | composer | symfony/security-http | 15 | Nov 29, 2024 | pkg:composer/symfony/security-http |
| 73 | composer | alextselegidis/easyappointments | 14 | Jan 15, 2026 | pkg:composer/alextselegidis/easyappointments |
| 74 | composer | dompdf/dompdf | 14 | Nov 15, 2024 | pkg:composer/dompdf/dompdf |
| 75 | composer | ec-cube/ec-cube | 14 | Sep 27, 2022 | pkg:composer/ec-cube/ec-cube |
| 76 | composer | feehi/feehicms | 14 | Dec 1, 2025 | pkg:composer/feehi/feehicms |
| 77 | composer | lavalite/cms | 14 | Jan 23, 2026 | pkg:composer/lavalite/cms |
| 78 | composer | modx/revolution | 14 | Mar 13, 2025 | pkg:composer/modx/revolution |
| 79 | composer | phpmailer/phpmailer | 14 | Jun 17, 2021 | pkg:composer/phpmailer/phpmailer |
| 80 | composer | pimcore/admin-ui-classic-bundle | 14 | Jan 15, 2026 | pkg:composer/pimcore/admin-ui-classic-bundle |
| 81 | composer | zendframework/zendframework1 | 14 | Feb 17, 2020 | pkg:composer/zendframework/zendframework1 |
| 82 | composer | elefant/cms | 13 | Jun 20, 2022 | pkg:composer/elefant/cms |
| 83 | composer | impresscms/impresscms | 13 | Jul 13, 2023 | pkg:composer/impresscms/impresscms |
| 84 | composer | kimai/kimai | 13 | May 8, 2026 | pkg:composer/kimai/kimai |
| 85 | composer | pagekit/pagekit | 13 | Dec 17, 2025 | pkg:composer/pagekit/pagekit |
| 86 | composer | yiisoft/yii2 | 13 | May 20, 2026 | pkg:composer/yiisoft/yii2 |
| 87 | composer | cakephp/cakephp | 12 | Jan 16, 2026 | pkg:composer/cakephp/cakephp |
| 88 | composer | laravel/framework | 12 | Mar 10, 2025 | pkg:composer/laravel/framework |
| 89 | composer | nukeviet/nukeviet | 12 | May 15, 2026 | pkg:composer/nukeviet/nukeviet |
| 90 | composer | silverstripe/cms | 12 | Nov 23, 2022 | pkg:composer/silverstripe/cms |
| 91 | composer | sulu/sulu | 12 | Mar 31, 2026 | pkg:composer/sulu/sulu |
| 92 | composer | symfony/http-foundation | 12 | Nov 12, 2025 | pkg:composer/symfony/http-foundation |
| 93 | composer | composer/composer | 11 | Apr 15, 2026 | pkg:composer/composer/composer |
| 94 | composer | october/october | 11 | Apr 21, 2026 | pkg:composer/october/october |
| 95 | composer | pterodactyl/panel | 11 | Feb 19, 2026 | pkg:composer/pterodactyl/panel |
| 96 | composer | redaxo/source | 11 | Jan 7, 2026 | pkg:composer/redaxo/source |
| 97 | composer | tinymce/tinymce | 11 | Jun 19, 2024 | pkg:composer/tinymce/tinymce |
| 98 | composer | zendframework/zendframework | 11 | Jan 4, 2021 | pkg:composer/zendframework/zendframework |
| 99 | composer | billz/raspap-webgui | 10 | Feb 2, 2026 | pkg:composer/billz/raspap-webgui |
| 100 | composer | croogo/croogo | 10 | Dec 26, 2025 | pkg:composer/croogo/croogo |
- composerFeb 21, 2026pkg:composer/moodle/moodle
- composerOct 14, 2025pkg:composer/magento/community-edition
- composerOct 14, 2025pkg:composer/magento/project-community-edition
- composerMay 11, 2026pkg:composer/wwbn/avideo
- composerMay 3, 2026pkg:composer/dolibarr/dolibarr
- composerApr 27, 2026pkg:composer/pimcore/pimcore
- composerFeb 7, 2023pkg:composer/typo3/cms
- composerJan 23, 2025pkg:composer/phpmyadmin/phpmyadmin
- composerFeb 5, 2026pkg:composer/microweber/microweber
- composerMay 8, 2026pkg:composer/librenms/librenms
- composerMay 12, 2026pkg:composer/craftcms/cms
- composerNov 18, 2025pkg:composer/drupal/core
- composerApr 2, 2026pkg:composer/thorsten/phpmyfaq
- composerJan 13, 2026pkg:composer/typo3/cms-core
- composerMar 24, 2026pkg:composer/concrete5/concrete5
- composerDec 9, 2024pkg:composer/drupal/drupal
- composerJan 28, 2026pkg:composer/symfony/symfony
- composerMay 12, 2026pkg:composer/getgrav/grav
- composerMay 20, 2026pkg:composer/mantisbt/mantisbt
- composerMar 31, 2026pkg:composer/baserproject/basercms
- composerFeb 24, 2026pkg:composer/mautic/core
- composerApr 23, 2026pkg:composer/froxlor/froxlor
- composerMay 8, 2026pkg:composer/snipe/snipe-it
- composerFeb 2, 2026pkg:composer/intelliants/subrion
- composerDec 30, 2024pkg:composer/nilsteampassnet/teampass
- composerApr 25, 2026pkg:composer/showdoc/showdoc
- composerMar 11, 2026pkg:composer/shopware/platform
- composerMay 7, 2026pkg:composer/admidio/admidio
- composerApr 10, 2025pkg:composer/silverstripe/framework
- composerMay 9, 2026pkg:composer/getkirby/cms
- composerMay 7, 2026pkg:composer/ci4-cms-erp/ci4ms
- composerMar 11, 2026pkg:composer/shopware/core
- composerNov 25, 2025pkg:composer/contao/core-bundle
- composerMay 14, 2026pkg:composer/prestashop/prestashop
- composerMay 12, 2026pkg:composer/statamic/cms
- composerOct 9, 2023pkg:composer/mediawiki/core
- composerApr 1, 2024pkg:composer/centreon/centreon
- composerMay 12, 2026pkg:composer/phpoffice/phpspreadsheet
- composerMay 4, 2026pkg:composer/funadmin/funadmin
- composerApr 29, 2026pkg:composer/cockpit-hq/cockpit
- composerJul 22, 2020pkg:composer/magento/core
- composerAug 28, 2025pkg:composer/contao/contao
- composerFeb 3, 2025pkg:composer/phpoffice/phpexcel
- composerFeb 28, 2024pkg:composer/remdex/livehelperchat
- composerJan 14, 2026pkg:composer/shopware/shopware
- composerJun 17, 2024pkg:composer/grumpydictator/firefly-iii
- composerApr 21, 2026pkg:composer/october/system
- composerMar 10, 2026pkg:composer/sylius/sylius
- composerOct 2, 2024pkg:composer/tribalsystems/zenario
- composerApr 21, 2026pkg:composer/typo3/cms-backend
- composerApr 6, 2026pkg:composer/feehi/cms
- composerApr 20, 2026pkg:composer/openmage/magento-lts
- composerApr 2, 2026pkg:composer/phpmyfaq/phpmyfaq
- composerApr 21, 2026pkg:composer/bagisto/bagisto
- composerApr 13, 2026pkg:composer/craftcms/commerce
- composerAug 5, 2025pkg:composer/topthink/framework
- composerMay 18, 2026pkg:composer/facturascripts/facturascripts
- composerAug 12, 2022pkg:composer/forkcms/forkcms
- composerMar 3, 2022pkg:composer/genix/cms
- composerMay 4, 2026pkg:composer/devcode-it/openstamanager
- composerApr 1, 2024pkg:composer/francoisjacquet/rosariosis
- composerDec 18, 2024pkg:composer/opencart/opencart
- composerApr 21, 2020pkg:composer/simplesamlphp/simplesamlphp
- composerMay 13, 2021pkg:composer/symfony/security
- composerFeb 16, 2024pkg:composer/yetiforce/yetiforce-crm
- composerMay 7, 2026pkg:composer/yeswiki/yeswiki
- composerJul 3, 2025pkg:composer/bolt/bolt
- composerJul 28, 2025pkg:composer/codeigniter4/framework
- composerNov 2, 2023pkg:composer/phpbb/phpbb
- composerMay 28, 2024pkg:composer/smarty/smarty
- composerMay 11, 2026pkg:composer/studio-42/elfinder
- composerNov 29, 2024pkg:composer/symfony/security-http
- composerJan 15, 2026pkg:composer/alextselegidis/easyappointments
- composerNov 15, 2024pkg:composer/dompdf/dompdf
- composerSep 27, 2022pkg:composer/ec-cube/ec-cube
- composerDec 1, 2025pkg:composer/feehi/feehicms
- composerJan 23, 2026pkg:composer/lavalite/cms
- composerMar 13, 2025pkg:composer/modx/revolution
- composerJun 17, 2021pkg:composer/phpmailer/phpmailer
- composerJan 15, 2026pkg:composer/pimcore/admin-ui-classic-bundle
- composerFeb 17, 2020pkg:composer/zendframework/zendframework1
- composerJun 20, 2022pkg:composer/elefant/cms
- composerJul 13, 2023pkg:composer/impresscms/impresscms
- composerMay 8, 2026pkg:composer/kimai/kimai
- composerDec 17, 2025pkg:composer/pagekit/pagekit
- composerMay 20, 2026pkg:composer/yiisoft/yii2
- composerJan 16, 2026pkg:composer/cakephp/cakephp
- composerMar 10, 2025pkg:composer/laravel/framework
- composerMay 15, 2026pkg:composer/nukeviet/nukeviet
- composerNov 23, 2022pkg:composer/silverstripe/cms
- composerMar 31, 2026pkg:composer/sulu/sulu
- composerNov 12, 2025pkg:composer/symfony/http-foundation
- composerApr 15, 2026pkg:composer/composer/composer
- composerApr 21, 2026pkg:composer/october/october
- composerFeb 19, 2026pkg:composer/pterodactyl/panel
- composerJan 7, 2026pkg:composer/redaxo/source
- composerJun 19, 2024pkg:composer/tinymce/tinymce
- composerJan 4, 2021pkg:composer/zendframework/zendframework
- composerFeb 2, 2026pkg:composer/billz/raspap-webgui
- composerDec 26, 2025pkg:composer/croogo/croogo
Showing top 100 packages in composer by CVE count. Data union of GitHub Security Advisories + OSV.dev (refreshed every 15 min).