Technology · Packagist
francoisjacquet/rosariosis (Packagist) vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 17 vulnerabilities in francoisjacquet/rosariosis (Packagist): 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2024-3138, was published on 2 April 2024.
- Last 7 days
- 0
- Last 90 days
- 0
- Critical, all time
- 0
- Exploited in the wild
- 0
Latest francoisjacquet/rosariosis (Packagist) vulnerabilities
- CVE-2024-3138: RosarioSIS cross site scripting vulnerabilitylowCVSS 3.1EPSS 0.5%
- CVE-2023-2665: RosarioSIS Stores Sensitive Data in a Mechanism without Access ControllowCVSS 3.1EPSS 0.6%
- CVE-2023-29918: RosarioSIS vulnerable to CSV InjectionlowCVSS 3.1EPSS 2.2%
- CVE-2023-2202: RosarioSIS improper access control vulnerabilitylowCVSS 3.1EPSS 0.5%
- CVE-2023-0994: RosarioSIS Improper Access Control vulnerabilitylowCVSS 3.1EPSS 1.0%
- CVE-2022-2714: RosarioSIS before 10.1 vulnerable to Improper Handling of Length Parameter InconsistencylowCVSS 3EPSS 0.9%
- CVE-2022-3072: francoisjacquet/rosariosis vulnerable to Cross-Site Scripting (XSS)lowCVSS 3.1EPSS 0.9%
- CVE-2022-2067: SQL Injection in RosarioSISlowCVSS 3.1EPSS 1.9%
- CVE-2022-2036: Cross site scripting in francoisjacquet/rosariosislowCVSS 3.1EPSS 0.9%
- CVE-2022-1997: Cross-site Scripting in RosarioSISlowCVSS 3.1EPSS 0.7%
- CVE-2021-44566: Cross site scripting in francoisjacquet/rosariosislowCVSS 3.1EPSS 0.7%
- CVE-2021-44567: SQL injection in francoisjacquet/rosariosislowCVSS 3.1EPSS 23.1%
- CVE-2021-44565: Cross site scripting in francoisjacquet/rosariosislowCVSS 3.1EPSS 0.7%
- CVE-2020-15721: Cross-site Scripting in RosarioSISlowCVSS 3.1EPSS 1.5%
- CVE-2021-45416: RosarioSIS XSS VulnerabilityinfoEPSS 2.3%
- CVE-2021-44427: SQL Injection in rosariosislowCVSS 3.1EPSS 50.6%
- CVE-2020-13278: Reflected cross-site scripting in francoisjacquet/rosariosislowCVSS 3.1EPSS 1.4%
Most severe francoisjacquet/rosariosis (Packagist) vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2021-44427: SQL Injection in rosariosislowCVSS 3.1EPSS 50.6%
- CVE-2021-44567: SQL injection in francoisjacquet/rosariosislowCVSS 3.1EPSS 23.1%
- CVE-2023-29918: RosarioSIS vulnerable to CSV InjectionlowCVSS 3.1EPSS 2.2%
- CVE-2022-2067: SQL Injection in RosarioSISlowCVSS 3.1EPSS 1.9%
- CVE-2020-15721: Cross-site Scripting in RosarioSISlowCVSS 3.1EPSS 1.5%
- CVE-2020-13278: Reflected cross-site scripting in francoisjacquet/rosariosislowCVSS 3.1EPSS 1.4%
- CVE-2023-0994: RosarioSIS Improper Access Control vulnerabilitylowCVSS 3.1EPSS 1.0%
- CVE-2022-3072: francoisjacquet/rosariosis vulnerable to Cross-Site Scripting (XSS)lowCVSS 3.1EPSS 0.9%
- CVE-2022-2036: Cross site scripting in francoisjacquet/rosariosislowCVSS 3.1EPSS 0.9%
- CVE-2021-44565: Cross site scripting in francoisjacquet/rosariosislowCVSS 3.1EPSS 0.7%
Vulnerabilities per week
The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 6 Jul 2026 | 0 | 0 | |
| 13 Jul 2026 | 0 | 0 | |
| 20 Jul 2026 | 0 | 0 | |
| 27 Jul 2026 | 0 | 0 | |
| 3 Aug 2026 | 0 | 0 | |
| 10 Aug 2026 | 0 | 0 | |
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 |
How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies/francoisjacquet-rosariosis.json, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "francoisjacquet/rosariosis (Packagist) vulnerabilities", https://junglewise.ai/threats/technologies/francoisjacquet-rosariosis, 28 September 2026.