# Packagist package vulnerabilities Source: https://junglewise.ai/threats/vendors/packagist Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/packagist.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 6,590 vulnerabilities in Packagist packages: 4 in the last 7 days and 314 in the last 90 days, 131 of them critical and 22 exploited in the wild. The most recent, CVE-2026-84987, was published on 12 November 2026. 34 vulnerabilities in the last four weeks, down 65% on the four before (98). 1 critical against 5. 336 packages have a page of their own. ## Counts - Last 7 days: 4 - Last 30 days: 33 - Last 90 days: 314 - All time: 6590 (131 critical, 22 exploited in the wild) ## About Packagist Composer repository for PHP packages. ## Latest Packagist package vulnerabilities - [CVE-2026-84987: code16/sharp server-side request forgery in autocomplete endpoint](https://junglewise.ai/threats/cve-2026-84987-code16-sharp-server-side-request-forgery-through-an-unanchored) (medium, CVSS 5.4, published 12 Nov 2026) - [CVE-2026-84974: Code16 Sharp arbitrary class instantiation in embed_key parameter](https://junglewise.ai/threats/cve-2026-84974-code16-sharp-arbitrary-class-instantiation-through-the-embed-key) (medium, CVSS 5.4, published 12 Nov 2026) - [CVE-2026-94619: FileGator path traversal in file upload via temporary directory](https://junglewise.ai/threats/cve-2026-94619-filegator-is-a-multi-user-file-manager-prior-to-7-15-0-post) (medium, CVSS 5.9, published 6 Nov 2026) - [CVE-2026-94618: FileGator missing authorization in batch download](https://junglewise.ai/threats/cve-2026-94618-filegator-is-a-multi-user-file-manager-prior-to-7-15-0-get) (medium, CVSS 5.4, published 6 Nov 2026) - [CVE-2026-33944: Dolibarr SQL injection in localtax parameters](https://junglewise.ai/threats/cve-2026-33944-dolibarr-has-sql-injection-in-societe-class-societe-class-php-via) (high, CVSS 8.8, published 5 Nov 2026) - [CVE-2026-55186: SilverStripe MFA authentication bypass in password reset](https://junglewise.ai/threats/cve-2026-55186-multifactor-authentication-for-silverstripe-can-bypass-mfa-during) (medium, CVSS 4.2, published 3 Nov 2026) - [CVE-2026-96634: AdminNeo SQLite regex backtracking filter bypass in ATTACH statement check](https://junglewise.ai/threats/cve-2026-96634-adminneo-sqlite-multi-query-incorrect-check-of-function-return) (medium, CVSS 4, published 30 Oct 2026) - [CVE-2026-96633: AdminNeo SQLite database-list drop arbitrary file deletion](https://junglewise.ai/threats/cve-2026-96633-adminneo-sqlite-database-list-drop-arbitrary-file-deletion) (high, CVSS 8.1, published 30 Oct 2026) - [CVE-2026-96631: AdminNeo cookie attribute injection via X-Forwarded-Prefix](https://junglewise.ai/threats/cve-2026-96631-adminneo-has-cookie-attribute-injection-via-unsanitized-x) (high, CVSS 8.2, published 30 Oct 2026) - [CVE-2026-96632: AdminNeo XSS via rogue MySQL server version string (CSP nonce bypass)](https://junglewise.ai/threats/cve-2026-96632-adminneo-vulnerable-to-xss-via-rogue-mysql-server-version-string) (high, CVSS 4, published 30 Oct 2026) - [CVE-2026-96630: AdminNeo RCE via SQLite VACUUM INTO ATTACH blocklist bypass](https://junglewise.ai/threats/cve-2026-96630-adminneo-rce-via-sqlite-vacuum-into-attach-blocklist-bypass) (high, CVSS 7.2, published 30 Oct 2026) - [CVE-2026-96629: AdminNeo CSRF token vulnerability with session secret recovery](https://junglewise.ai/threats/cve-2026-96629-adminneo-csrf-token-secret-recoverable-from-single-observed-token) (medium, CVSS 6.8, published 30 Oct 2026) - [CVE-2026-59978: AdminNeo array injection in version endpoint causes denial of service](https://junglewise.ai/threats/cve-2026-59978-adminneo-version-cache-array-injection-causes-persistent-denial) (high, CVSS 7.5, published 30 Oct 2026) - [CVE-2026-108515: Drupal core Link module cross-site scripting in markup sanitization](https://junglewise.ai/threats/cve-2026-108515-drupal-core-2026-015-the-drupal-core-link-module-provides-a) (info, published 30 Oct 2026) - [CVE-2026-108514: Drupal Navigation module cross-site scripting in attributes](https://junglewise.ai/threats/cve-2026-108514-drupal-core-2026-016-the-navigation-module-doesn-t-sufficiently) (info, published 30 Oct 2026) - [CVE-2026-108097: Drupal Core remote code execution in Field UI module](https://junglewise.ai/threats/cve-2026-108097-drupal-core-2026-014-a-remote-code-execution-vulnerability) (info, published 30 Oct 2026) - [CVE-2026-107260: Drupal Sector distribution cross-site scripting in media names](https://junglewise.ai/threats/cve-2026-107260-drupal-contrib-2026-229-sector-is-a-distribution-targeted) (info, published 30 Oct 2026) - [CVE-2026-119193: PHPUnit predictable temp directory in code coverage for PHPT tests](https://junglewise.ai/threats/cve-2026-119193-phpunit-is-a-testing-framework-for-php-from-13-4-0-until-13-4-4) (medium, CVSS 4, published 29 Oct 2026) - [CVE-2026-56828: Shopper privilege escalation via improper Livewire authorization](https://junglewise.ai/threats/cve-2026-56828-shopper-privilege-escalation-via-improper-livewire-authorization) (high, CVSS 8.8, published 28 Oct 2026) - [CVE-2026-116675: TinyMCE media plugin stored cross-site scripting](https://junglewise.ai/threats/cve-2026-116675-tinymce-is-an-open-source-rich-text-editor-from-7-9-3-until-7-9) (high, CVSS 4, published 27 Oct 2026) - [Laravel Livewire authorization bypass via reordered parameters and #Json execution order](https://junglewise.ai/threats/livewire-authorization-bypass-in-authorize-via-reordered-parameter-keys-033fc9d0) (medium, CVSS 6.5, published 23 Oct 2026) - [CVE-2026-108360: PHPOffice PhpSpreadsheet redirect validation bypass in external image loading](https://junglewise.ai/threats/cve-2026-108360-phpspreadsheet-is-a-pure-php-library-for-reading-and-writing) (medium, CVSS 6.4, published 22 Oct 2026) - [CVE-2026-108359: PhpSpreadsheet denial-of-service via unbounded row repetition](https://junglewise.ai/threats/cve-2026-108359-phpspreadsheet-is-a-pure-php-library-for-reading-and-writing) (high, CVSS 4, published 22 Oct 2026) - [CVE-2026-108358: PhpSpreadsheet XmlScanner XML entity expansion denial of service](https://junglewise.ai/threats/cve-2026-108358-phpspreadsheet-is-a-pure-php-library-for-reading-and-writing) (high, CVSS 4, published 22 Oct 2026) - [CVE-2026-108357: PHPOffice PhpSpreadsheet XML entity expansion denial of service](https://junglewise.ai/threats/cve-2026-108357-phpspreadsheet-is-a-pure-php-library-for-reading-and-writing) (high, CVSS 4, published 22 Oct 2026) ## Most severe Packagist package vulnerabilities - [CVE-2026-9082: Drupal Drupal core SQL injection in database abstraction API](https://junglewise.ai/threats/cve-2026-9082-drupal-drupal-core-sql-injection-in-database-abstraction-api) (critical, exploited in the wild, CVSS 9.8, published 20 May 2026) - [CVE-2025-54236: Magento Community Edition Improper Input Validation vulnerability](https://junglewise.ai/threats/cve-2025-54236-adobe-commerce-versions-2-4-9-alpha2-2-4-8-p2-2-4-7-p7-2-4-6-p12) (critical, exploited in the wild, CVSS 9.1, published 9 Sep 2025) - [CVE-2017-9841: Code Injection in PHPUnit](https://junglewise.ai/threats/cve-2017-9841-phpunit-command-injection-vulnerability) (critical, exploited in the wild, CVSS 3.1, published 26 Mar 2022) - [CVE-2024-34102: Magento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability](https://junglewise.ai/threats/cve-2024-34102-adobe-commerce-and-magento-open-source-improper-restriction-of) (critical, exploited in the wild, CVSS 3.1, published 13 Jun 2024) - [CVE-2021-3129: Unauthenticated remote code execution in Ignition](https://junglewise.ai/threats/cve-2021-3129-laravel-ignition-file-upload-vulnerability) (critical, exploited in the wild, CVSS 3.1, published 29 Mar 2021) - [CVE-2025-32432: Craft CMS Allows Remote Code Execution](https://junglewise.ai/threats/cve-2025-32432-craft-cms-remote-code-execution-via-code-injection) (critical, exploited in the wild, CVSS 3.1, published 25 Apr 2025) - [CVE-2016-10033: Remote code execution in PHPMailer](https://junglewise.ai/threats/cve-2016-10033-phpmailer-command-injection-in-mailsend-function) (critical, exploited in the wild, CVSS 3.1, published 5 Mar 2020) - [CVE-2018-7602: Drupal Core Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2018-7602-drupal-core-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 3.1, published 23 Apr 2024) - [CVE-2022-24086: Magento improper input validation vulnerability](https://junglewise.ai/threats/cve-2022-24086-adobe-commerce-and-magento-open-source-improper-input-validation) (critical, exploited in the wild, CVSS 3.1, published 17 Feb 2022) - [CVE-2025-49113: Roundcube Webmail Vulnerable to Authenticated RCE via PHP Object Deserialization](https://junglewise.ai/threats/cve-2025-49113-roundcube-webmail-php-deserialization-in-upload-php) (critical, exploited in the wild, CVSS 3.1, published 2 Jun 2025) ## Vulnerabilities per week 34 vulnerabilities in the last four weeks, down 65% on the four before (98). 1 critical against 5. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 45 | 3 | 0 | | 24 Aug 2026 | 51 | 3 | 0 | | 31 Aug 2026 | 45 | 3 | 0 | | 7 Sep 2026 | 39 | 1 | 0 | | 14 Sep 2026 | 59 | 3 | 0 | | 21 Sep 2026 | 23 | 1 | 0 | | 28 Sep 2026 | 6 | 0 | 0 | | 5 Oct 2026 | 10 | 1 | 0 | | 12 Oct 2026 | 8 | 0 | 0 | | 19 Oct 2026 | 8 | 1 | 0 | | 26 Oct 2026 | 14 | 0 | 0 | | 2 Nov 2026 | 4 | 0 | 0 | | 9 Nov 2026 | 2 | 0 | 0 | ## Packagist packages - [moodle/moodle (Packagist)](https://junglewise.ai/threats/technologies/moodle-moodle): 434 vulnerabilities - [magento/community-edition (Packagist)](https://junglewise.ai/threats/technologies/packagist-magento-community-edition): 362 vulnerabilities - [typo3/cms (Packagist)](https://junglewise.ai/threats/technologies/packagist-typo3-cms): 187 vulnerabilities - [wwbn/avideo (Packagist)](https://junglewise.ai/threats/technologies/wwbn-avideo): 164 vulnerabilities - [magento/project-community-edition (Packagist)](https://junglewise.ai/threats/technologies/magento-project-community-edition): 161 vulnerabilities - [drupal/core (Packagist)](https://junglewise.ai/threats/technologies/packagist-drupal-core): 150 vulnerabilities - [pimcore/pimcore (Packagist)](https://junglewise.ai/threats/technologies/pimcore-pimcore): 145 vulnerabilities - [craftcms/cms (Packagist)](https://junglewise.ai/threats/technologies/craftcms-cms): 143 vulnerabilities - [dolibarr/dolibarr (Packagist)](https://junglewise.ai/threats/technologies/dolibarr-dolibarr): 127 vulnerabilities - [getgrav/grav (Packagist)](https://junglewise.ai/threats/technologies/getgrav-grav): 127 vulnerabilities - [typo3/cms-core (Packagist)](https://junglewise.ai/threats/technologies/typo3-cms-core): 127 vulnerabilities - [concrete5/concrete5 (Packagist)](https://junglewise.ai/threats/technologies/concrete5-concrete5): 122 vulnerabilities - [thorsten/phpmyfaq (Packagist)](https://junglewise.ai/threats/technologies/thorsten-phpmyfaq): 119 vulnerabilities - [librenms/librenms (Packagist)](https://junglewise.ai/threats/technologies/librenms-librenms): 107 vulnerabilities - [phpmyadmin/phpmyadmin (Packagist)](https://junglewise.ai/threats/technologies/phpmyadmin-phpmyadmin): 107 vulnerabilities - [microweber/microweber (Packagist)](https://junglewise.ai/threats/technologies/microweber-microweber): 106 vulnerabilities - [symfony/symfony (Packagist)](https://junglewise.ai/threats/technologies/symfony-symfony): 102 vulnerabilities - [silverstripe/framework (Packagist)](https://junglewise.ai/threats/technologies/silverstripe-framework): 93 vulnerabilities - [snipe/snipe-it (Packagist)](https://junglewise.ai/threats/technologies/snipe-snipe-it): 81 vulnerabilities - [drupal/drupal (Packagist)](https://junglewise.ai/threats/technologies/drupal-drupal): 79 vulnerabilities - [mantisbt/mantisbt (Packagist)](https://junglewise.ai/threats/technologies/mantisbt-mantisbt): 74 vulnerabilities - [shopware/platform (Packagist)](https://junglewise.ai/threats/technologies/shopware-platform): 71 vulnerabilities - [shopware/core (Packagist)](https://junglewise.ai/threats/technologies/shopware-core): 65 vulnerabilities - [froxlor/froxlor (Packagist)](https://junglewise.ai/threats/technologies/froxlor-froxlor): 60 vulnerabilities - [mautic/core (Packagist)](https://junglewise.ai/threats/technologies/packagist-mautic-core): 58 vulnerabilities - [baserproject/basercms (Packagist)](https://junglewise.ai/threats/technologies/baserproject-basercms): 56 vulnerabilities - [getkirby/cms (Packagist)](https://junglewise.ai/threats/technologies/getkirby-cms): 55 vulnerabilities - [phpmyfaq/phpmyfaq (Packagist)](https://junglewise.ai/threats/technologies/phpmyfaq-phpmyfaq): 54 vulnerabilities - [admidio/admidio (Packagist)](https://junglewise.ai/threats/technologies/admidio-admidio): 50 vulnerabilities - [statamic/cms (Packagist)](https://junglewise.ai/threats/technologies/statamic-cms): 44 vulnerabilities - [intelliants/subrion (Packagist)](https://junglewise.ai/threats/technologies/intelliants-subrion): 43 vulnerabilities - [nilsteampassnet/teampass (Packagist)](https://junglewise.ai/threats/technologies/nilsteampassnet-teampass): 42 vulnerabilities - [showdoc/showdoc (Packagist)](https://junglewise.ai/threats/technologies/showdoc-showdoc): 42 vulnerabilities - [contao/core-bundle (Packagist)](https://junglewise.ai/threats/technologies/contao-core-bundle): 40 vulnerabilities - [ci4-cms-erp/ci4ms (Packagist)](https://junglewise.ai/threats/technologies/ci4-cms-erp-ci4ms): 36 vulnerabilities - [phpoffice/phpspreadsheet (Packagist)](https://junglewise.ai/threats/technologies/phpoffice-phpspreadsheet): 35 vulnerabilities - [shopware/shopware (Packagist)](https://junglewise.ai/threats/technologies/shopware-shopware): 34 vulnerabilities - [zendframework/zendframework1 (Packagist)](https://junglewise.ai/threats/technologies/zendframework-zendframework1): 34 vulnerabilities - [kimai/kimai (Packagist)](https://junglewise.ai/threats/technologies/kimai-kimai): 33 vulnerabilities - [prestashop/prestashop (Packagist)](https://junglewise.ai/threats/technologies/prestashop-prestashop): 33 vulnerabilities - [pocketmine/pocketmine-mp (Packagist)](https://junglewise.ai/threats/technologies/pocketmine-pocketmine-mp): 31 vulnerabilities - [yeswiki/yeswiki (Packagist)](https://junglewise.ai/threats/technologies/yeswiki-yeswiki): 31 vulnerabilities - [mediawiki/core (Packagist)](https://junglewise.ai/threats/technologies/mediawiki-core): 28 vulnerabilities - [laravel/framework (Packagist)](https://junglewise.ai/threats/technologies/packagist-laravel-framework): 28 vulnerabilities - [centreon/centreon (Packagist)](https://junglewise.ai/threats/technologies/centreon-centreon): 27 vulnerabilities - [cockpit-hq/cockpit (Packagist)](https://junglewise.ai/threats/technologies/cockpit-hq-cockpit): 26 vulnerabilities - [contao/contao (Packagist)](https://junglewise.ai/threats/technologies/contao-contao): 26 vulnerabilities - [facturascripts/facturascripts (Packagist)](https://junglewise.ai/threats/technologies/facturascripts-facturascripts): 26 vulnerabilities - [funadmin/funadmin (Packagist)](https://junglewise.ai/threats/technologies/funadmin-funadmin): 26 vulnerabilities - [grumpydictator/firefly-iii (Packagist)](https://junglewise.ai/threats/technologies/grumpydictator-firefly-iii): 26 vulnerabilities - [openmage/magento-lts (Packagist)](https://junglewise.ai/threats/technologies/openmage-magento-lts): 26 vulnerabilities - [october/system (Packagist)](https://junglewise.ai/threats/technologies/october-system): 25 vulnerabilities - [simplesamlphp/simplesamlphp (Packagist)](https://junglewise.ai/threats/technologies/simplesamlphp-simplesamlphp): 25 vulnerabilities - [sylius/sylius (Packagist)](https://junglewise.ai/threats/technologies/sylius-sylius): 25 vulnerabilities - [typo3/cms-backend (Packagist)](https://junglewise.ai/threats/technologies/typo3-cms-backend): 25 vulnerabilities - [magento/core (Packagist)](https://junglewise.ai/threats/technologies/magento-core): 24 vulnerabilities - [twig/twig (Packagist)](https://junglewise.ai/threats/technologies/twig-twig): 24 vulnerabilities - [phpoffice/phpexcel (Packagist)](https://junglewise.ai/threats/technologies/phpoffice-phpexcel): 23 vulnerabilities - [remdex/livehelperchat (Packagist)](https://junglewise.ai/threats/technologies/remdex-livehelperchat): 23 vulnerabilities - [zendframework/zendframework (Packagist)](https://junglewise.ai/threats/technologies/zendframework-zendframework): 23 vulnerabilities - [cakephp/cakephp (Packagist)](https://junglewise.ai/threats/technologies/cakephp-cakephp): 22 vulnerabilities - [tribalsystems/zenario (Packagist)](https://junglewise.ai/threats/technologies/tribalsystems-zenario): 22 vulnerabilities - [feehi/cms (Packagist)](https://junglewise.ai/threats/technologies/packagist-feehi-cms): 21 vulnerabilities - [symfony/security-http (Packagist)](https://junglewise.ai/threats/technologies/symfony-security-http): 21 vulnerabilities - [alextselegidis/easyappointments (Packagist)](https://junglewise.ai/threats/technologies/alextselegidis-easyappointments): 20 vulnerabilities - [bagisto/bagisto (Packagist)](https://junglewise.ai/threats/technologies/bagisto-bagisto): 20 vulnerabilities - [codeigniter4/framework (Packagist)](https://junglewise.ai/threats/technologies/codeigniter4-framework): 20 vulnerabilities - [craftcms/commerce (Packagist)](https://junglewise.ai/threats/technologies/craftcms-commerce): 20 vulnerabilities - [dompdf/dompdf (Packagist)](https://junglewise.ai/threats/technologies/dompdf-dompdf): 20 vulnerabilities - [pterodactyl/panel (Packagist)](https://junglewise.ai/threats/technologies/pterodactyl-panel): 19 vulnerabilities - [studio-42/elfinder (Packagist)](https://junglewise.ai/threats/technologies/studio-42-elfinder): 19 vulnerabilities - [topthink/framework (Packagist)](https://junglewise.ai/threats/technologies/topthink-framework): 19 vulnerabilities - [devcode-it/openstamanager (Packagist)](https://junglewise.ai/threats/technologies/devcode-it-openstamanager): 18 vulnerabilities - [forkcms/forkcms (Packagist)](https://junglewise.ai/threats/technologies/forkcms-forkcms): 18 vulnerabilities - [genix/cms (Packagist)](https://junglewise.ai/threats/technologies/genix-cms): 18 vulnerabilities - [guzzlehttp/guzzle (Packagist)](https://junglewise.ai/threats/technologies/guzzlehttp-guzzle): 18 vulnerabilities - [league/commonmark (Packagist)](https://junglewise.ai/threats/technologies/league-commonmark): 18 vulnerabilities - [opencart/opencart (Packagist)](https://junglewise.ai/threats/technologies/opencart-opencart): 18 vulnerabilities - [redaxo/source (Packagist)](https://junglewise.ai/threats/technologies/redaxo-source): 18 vulnerabilities - [smarty/smarty (Packagist)](https://junglewise.ai/threats/technologies/smarty-smarty): 18 vulnerabilities - [composer/composer (Packagist)](https://junglewise.ai/threats/technologies/composer-composer): 17 vulnerabilities - [francoisjacquet/rosariosis (Packagist)](https://junglewise.ai/threats/technologies/francoisjacquet-rosariosis): 17 vulnerabilities - [nukeviet/nukeviet (Packagist)](https://junglewise.ai/threats/technologies/nukeviet-nukeviet): 17 vulnerabilities - [pimcore/admin-ui-classic-bundle (Packagist)](https://junglewise.ai/threats/technologies/pimcore-admin-ui-classic-bundle): 17 vulnerabilities - [sulu/sulu (Packagist)](https://junglewise.ai/threats/technologies/sulu-sulu): 17 vulnerabilities - [symfony/security (Packagist)](https://junglewise.ai/threats/technologies/symfony-security): 17 vulnerabilities - [yetiforce/yetiforce-crm (Packagist)](https://junglewise.ai/threats/technologies/yetiforce-yetiforce-crm): 17 vulnerabilities - [ezsystems/ezpublish-kernel (Packagist)](https://junglewise.ai/threats/technologies/ezsystems-ezpublish-kernel): 16 vulnerabilities - [phpbb/phpbb (Packagist)](https://junglewise.ai/threats/technologies/phpbb-phpbb): 16 vulnerabilities - [silverstripe/cms (Packagist)](https://junglewise.ai/threats/technologies/silverstripe-cms): 16 vulnerabilities - [wallabag/wallabag (Packagist)](https://junglewise.ai/threats/technologies/wallabag-wallabag): 16 vulnerabilities - [bolt/bolt (Packagist)](https://junglewise.ai/threats/technologies/bolt-bolt): 15 vulnerabilities - [ec-cube/ec-cube (Packagist)](https://junglewise.ai/threats/technologies/ec-cube-ec-cube): 15 vulnerabilities - [symfony/http-foundation (Packagist)](https://junglewise.ai/threats/technologies/symfony-http-foundation): 15 vulnerabilities - [winter/wn-backend-module (Packagist)](https://junglewise.ai/threats/technologies/winter-wn-backend-module): 15 vulnerabilities - [feehi/feehicms (Packagist)](https://junglewise.ai/threats/technologies/feehi-feehicms): 14 vulnerabilities - [leantime/leantime (Packagist)](https://junglewise.ai/threats/technologies/leantime-leantime): 14 vulnerabilities - [modx/revolution (Packagist)](https://junglewise.ai/threats/technologies/modx-revolution): 14 vulnerabilities - [lavalite/cms (Packagist)](https://junglewise.ai/threats/technologies/packagist-lavalite-cms): 14 vulnerabilities - [phpmailer/phpmailer (Packagist)](https://junglewise.ai/threats/technologies/phpmailer-phpmailer): 14 vulnerabilities - [phpseclib/phpseclib (Packagist)](https://junglewise.ai/threats/technologies/phpseclib-phpseclib): 14 vulnerabilities - [elefant/cms (Packagist)](https://junglewise.ai/threats/technologies/elefant-cms): 13 vulnerabilities - [impresscms/impresscms (Packagist)](https://junglewise.ai/threats/technologies/impresscms-impresscms): 13 vulnerabilities - [october/october (Packagist)](https://junglewise.ai/threats/technologies/october-october): 13 vulnerabilities - [pagekit/pagekit (Packagist)](https://junglewise.ai/threats/technologies/pagekit-pagekit): 13 vulnerabilities - [yiisoft/yii2 (Packagist)](https://junglewise.ai/threats/technologies/yiisoft-yii2): 13 vulnerabilities - [shopper/framework (Packagist)](https://junglewise.ai/threats/technologies/shopper-framework): 12 vulnerabilities - [backpack/crud (Packagist)](https://junglewise.ai/threats/technologies/backpack-crud): 11 vulnerabilities - [ezsystems/ezplatform-kernel (Packagist)](https://junglewise.ai/threats/technologies/ezsystems-ezplatform-kernel): 11 vulnerabilities - [ezsystems/ezpublish-legacy (Packagist)](https://junglewise.ai/threats/technologies/ezsystems-ezpublish-legacy): 11 vulnerabilities - [tinymce/tinymce (Packagist)](https://junglewise.ai/threats/technologies/tinymce-tinymce): 11 vulnerabilities - [billz/raspap-webgui (Packagist)](https://junglewise.ai/threats/technologies/billz-raspap-webgui): 10 vulnerabilities - [code16/sharp (Packagist)](https://junglewise.ai/threats/technologies/code16-sharp): 10 vulnerabilities - [croogo/croogo (Packagist)](https://junglewise.ai/threats/technologies/croogo-croogo): 10 vulnerabilities - [ezsystems/ezplatform-admin-ui (Packagist)](https://junglewise.ai/threats/technologies/ezsystems-ezplatform-admin-ui): 10 vulnerabilities - [mediawiki/semantic-media-wiki (Packagist)](https://junglewise.ai/threats/technologies/mediawiki-semantic-media-wiki): 10 vulnerabilities - [roundcube/roundcubemail (Packagist)](https://junglewise.ai/threats/technologies/roundcube-roundcubemail): 10 vulnerabilities - [spatie/browsershot (Packagist)](https://junglewise.ai/threats/technologies/spatie-browsershot): 10 vulnerabilities - [ssddanbrown/bookstack (Packagist)](https://junglewise.ai/threats/technologies/ssddanbrown-bookstack): 10 vulnerabilities - [verbb/formie (Packagist)](https://junglewise.ai/threats/technologies/verbb-formie): 10 vulnerabilities - [azuracast/azuracast (Packagist)](https://junglewise.ai/threats/technologies/azuracast-azuracast): 9 vulnerabilities - [Composer (Packagist)](https://junglewise.ai/threats/technologies/composer): 9 vulnerabilities - [concrete5/core (Packagist)](https://junglewise.ai/threats/technologies/concrete5-core): 9 vulnerabilities - [contao/core (Packagist)](https://junglewise.ai/threats/technologies/contao-core): 9 vulnerabilities - [flarum/core (Packagist)](https://junglewise.ai/threats/technologies/flarum-core): 9 vulnerabilities - [in2code/femanager (Packagist)](https://junglewise.ai/threats/technologies/in2code-femanager): 9 vulnerabilities - [in2code/powermail (Packagist)](https://junglewise.ai/threats/technologies/in2code-powermail): 9 vulnerabilities - [kevinpapst/kimai2 (Packagist)](https://junglewise.ai/threats/technologies/kevinpapst-kimai2): 9 vulnerabilities - [krayin/laravel-crm (Packagist)](https://junglewise.ai/threats/technologies/krayin-laravel-crm): 9 vulnerabilities - [opensource-workshop/connect-cms (Packagist)](https://junglewise.ai/threats/technologies/opensource-workshop-connect-cms): 9 vulnerabilities - [october/cms (Packagist)](https://junglewise.ai/threats/technologies/packagist-october-cms): 9 vulnerabilities - [vrana/adminer (Packagist)](https://junglewise.ai/threats/technologies/packagist-vrana-adminer): 9 vulnerabilities - [pimcore/customer-management-framework-bundle (Packagist)](https://junglewise.ai/threats/technologies/pimcore-customer-management-framework-bundle): 9 vulnerabilities - [simplesamlphp/saml2 (Packagist)](https://junglewise.ai/threats/technologies/simplesamlphp-saml2): 9 vulnerabilities - [starcitizentools/citizen-skin (Packagist)](https://junglewise.ai/threats/technologies/starcitizentools-citizen-skin): 9 vulnerabilities - [typo3/cms-form (Packagist)](https://junglewise.ai/threats/technologies/typo3-cms-form): 9 vulnerabilities - [yourls/yourls (Packagist)](https://junglewise.ai/threats/technologies/yourls-yourls): 9 vulnerabilities - [api-platform/core (Packagist)](https://junglewise.ai/threats/technologies/api-platform-core): 8 vulnerabilities - [automad/automad (Packagist)](https://junglewise.ai/threats/technologies/automad-automad): 8 vulnerabilities - [backdrop/backdrop (Packagist)](https://junglewise.ai/threats/technologies/backdrop-backdrop): 8 vulnerabilities - [codiad/codiad (Packagist)](https://junglewise.ai/threats/technologies/codiad-codiad): 8 vulnerabilities - [directmailteam/direct-mail (Packagist)](https://junglewise.ai/threats/technologies/directmailteam-direct-mail): 8 vulnerabilities - [enshrined/svg-sanitize (Packagist)](https://junglewise.ai/threats/technologies/enshrined-svg-sanitize): 8 vulnerabilities - [filament/filament (Packagist)](https://junglewise.ai/threats/technologies/filament-filament): 8 vulnerabilities - [gilacms/gila (Packagist)](https://junglewise.ai/threats/technologies/gilacms-gila): 8 vulnerabilities - [joomla/joomla-cms (Packagist)](https://junglewise.ai/threats/technologies/joomla-joomla-cms): 8 vulnerabilities - [limesurvey/limesurvey (Packagist)](https://junglewise.ai/threats/technologies/limesurvey-limesurvey): 8 vulnerabilities - [phanan/koel (Packagist)](https://junglewise.ai/threats/technologies/phanan-koel): 8 vulnerabilities - [privatebin/privatebin (Packagist)](https://junglewise.ai/threats/technologies/privatebin-privatebin): 8 vulnerabilities - [silverstripe/admin (Packagist)](https://junglewise.ai/threats/technologies/silverstripe-admin): 8 vulnerabilities - [silverstripe/graphql (Packagist)](https://junglewise.ai/threats/technologies/silverstripe-graphql): 8 vulnerabilities - [symfony/http-kernel (Packagist)](https://junglewise.ai/threats/technologies/symfony-http-kernel): 8 vulnerabilities - [tecnickcom/tcpdf (Packagist)](https://junglewise.ai/threats/technologies/tecnickcom-tcpdf): 8 vulnerabilities - [twbs/bootstrap (Packagist)](https://junglewise.ai/threats/technologies/twbs-bootstrap): 8 vulnerabilities - [adminneo-org/adminneo (Packagist)](https://junglewise.ai/threats/technologies/adminneo-org-adminneo): 7 vulnerabilities - [egroupware/egroupware (Packagist)](https://junglewise.ai/threats/technologies/egroupware-egroupware): 7 vulnerabilities - [getformwork/formwork (Packagist)](https://junglewise.ai/threats/technologies/getformwork-formwork): 7 vulnerabilities - [idno/known (Packagist)](https://junglewise.ai/threats/technologies/idno-known): 7 vulnerabilities - [livewire/livewire (Packagist)](https://junglewise.ai/threats/technologies/livewire-livewire): 7 vulnerabilities - [october/backend (Packagist)](https://junglewise.ai/threats/technologies/october-backend): 7 vulnerabilities - [passbolt/passbolt_api (Packagist)](https://junglewise.ai/threats/technologies/passbolt-passbolt-api): 7 vulnerabilities - [paymenter/paymenter (Packagist)](https://junglewise.ai/threats/technologies/paymenter-paymenter): 7 vulnerabilities - [shopxo/shopxo (Packagist)](https://junglewise.ai/threats/technologies/shopxo-shopxo): 7 vulnerabilities - [unopim/unopim (Packagist)](https://junglewise.ai/threats/technologies/unopim-unopim): 7 vulnerabilities - [wpglobus/wpglobus (Packagist)](https://junglewise.ai/threats/technologies/wpglobus-wpglobus): 7 vulnerabilities - [yiisoft/yii2-dev (Packagist)](https://junglewise.ai/threats/technologies/yiisoft-yii2-dev): 7 vulnerabilities - [adodb/adodb-php (Packagist)](https://junglewise.ai/threats/technologies/adodb-adodb-php): 6 vulnerabilities - [auth0/symfony (Packagist)](https://junglewise.ai/threats/technologies/auth0-symfony): 6 vulnerabilities - [auth0/wordpress (Packagist)](https://junglewise.ai/threats/technologies/auth0-wordpress): 6 vulnerabilities - [cachethq/cachet (Packagist)](https://junglewise.ai/threats/technologies/cachethq-cachet): 6 vulnerabilities - [drupal/core-recommended (Packagist)](https://junglewise.ai/threats/technologies/drupal-core-recommended): 6 vulnerabilities - [dweeves/magmi (Packagist)](https://junglewise.ai/threats/technologies/dweeves-magmi): 6 vulnerabilities - [gleez/cms (Packagist)](https://junglewise.ai/threats/technologies/gleez-cms): 6 vulnerabilities - [guzzlehttp/psr7 (Packagist)](https://junglewise.ai/threats/technologies/guzzlehttp-psr7): 6 vulnerabilities - [ibexa/admin-ui (Packagist)](https://junglewise.ai/threats/technologies/ibexa-admin-ui): 6 vulnerabilities - [icecoder/icecoder (Packagist)](https://junglewise.ai/threats/technologies/icecoder-icecoder): 6 vulnerabilities - [mineadmin/mineadmin (Packagist)](https://junglewise.ai/threats/technologies/mineadmin-mineadmin): 6 vulnerabilities - [nystudio107/craft-seomatic (Packagist)](https://junglewise.ai/threats/technologies/nystudio107-craft-seomatic): 6 vulnerabilities - [october/rain (Packagist)](https://junglewise.ai/threats/technologies/october-rain): 6 vulnerabilities - [oro/platform (Packagist)](https://junglewise.ai/threats/technologies/oro-platform): 6 vulnerabilities - [pheditor/pheditor (Packagist)](https://junglewise.ai/threats/technologies/pheditor-pheditor): 6 vulnerabilities - [processwire/processwire (Packagist)](https://junglewise.ai/threats/technologies/processwire-processwire): 6 vulnerabilities - [silverstripe/assets (Packagist)](https://junglewise.ai/threats/technologies/silverstripe-assets): 6 vulnerabilities - [solspace/craft-freeform (Packagist)](https://junglewise.ai/threats/technologies/solspace-craft-freeform): 6 vulnerabilities - [symfony/ux-live-component (Packagist)](https://junglewise.ai/threats/technologies/symfony-ux-live-component): 6 vulnerabilities - [symfony/yaml (Packagist)](https://junglewise.ai/threats/technologies/symfony-yaml): 6 vulnerabilities - [typo3/cms-install (Packagist)](https://junglewise.ai/threats/technologies/typo3-cms-install): 6 vulnerabilities - [typo3/html-sanitizer (Packagist)](https://junglewise.ai/threats/technologies/typo3-html-sanitizer): 6 vulnerabilities - [zoujingli/thinkadmin (Packagist)](https://junglewise.ai/threats/technologies/zoujingli-thinkadmin): 6 vulnerabilities - [anchorcms/anchor-cms (Packagist)](https://junglewise.ai/threats/technologies/anchorcms-anchor-cms): 5 vulnerabilities - [auth0/auth0-php (Packagist)](https://junglewise.ai/threats/technologies/auth0-auth0-php): 5 vulnerabilities - [auth0/login (Packagist)](https://junglewise.ai/threats/technologies/auth0-login): 5 vulnerabilities - [bottelet/flarepoint (Packagist)](https://junglewise.ai/threats/technologies/bottelet-flarepoint): 5 vulnerabilities - [buddypress/buddypress (Packagist)](https://junglewise.ai/threats/technologies/buddypress-buddypress): 5 vulnerabilities - [codeigniter/framework (Packagist)](https://junglewise.ai/threats/technologies/codeigniter-framework): 5 vulnerabilities - [elgg/elgg (Packagist)](https://junglewise.ai/threats/technologies/elgg-elgg): 5 vulnerabilities - [flightphp/core (Packagist)](https://junglewise.ai/threats/technologies/flightphp-core): 5 vulnerabilities - [gugoan/economizzer (Packagist)](https://junglewise.ai/threats/technologies/gugoan-economizzer): 5 vulnerabilities - [ibexa/core (Packagist)](https://junglewise.ai/threats/technologies/ibexa-core): 5 vulnerabilities - [illuminate/database (Packagist)](https://junglewise.ai/threats/technologies/illuminate-database): 5 vulnerabilities - [mautic/core-lib (Packagist)](https://junglewise.ai/threats/technologies/mautic-core-lib): 5 vulnerabilities - [neos/flow (Packagist)](https://junglewise.ai/threats/technologies/neos-flow): 5 vulnerabilities - [neos/neos (Packagist)](https://junglewise.ai/threats/technologies/neos-neos): 5 vulnerabilities - [notrinos/notrinos-erp (Packagist)](https://junglewise.ai/threats/technologies/notrinos-notrinos-erp): 5 vulnerabilities - [juzaweb/cms (Packagist)](https://junglewise.ai/threats/technologies/packagist-juzaweb-cms): 5 vulnerabilities - [pear/archive_tar (Packagist)](https://junglewise.ai/threats/technologies/pear-archive-tar): 5 vulnerabilities - [phppgadmin/phppgadmin (Packagist)](https://junglewise.ai/threats/technologies/phppgadmin-phppgadmin): 5 vulnerabilities - [phpservermon/phpservermon (Packagist)](https://junglewise.ai/threats/technologies/phpservermon-phpservermon): 5 vulnerabilities - [phpxmlrpc/phpxmlrpc (Packagist)](https://junglewise.ai/threats/technologies/phpxmlrpc-phpxmlrpc): 5 vulnerabilities - [shopware/storefront (Packagist)](https://junglewise.ai/threats/technologies/shopware-storefront): 5 vulnerabilities - [starcitizenwiki/embedvideo (Packagist)](https://junglewise.ai/threats/technologies/starcitizenwiki-embedvideo): 5 vulnerabilities - [symfony/html-sanitizer (Packagist)](https://junglewise.ai/threats/technologies/symfony-html-sanitizer): 5 vulnerabilities - [symfony/security-bundle (Packagist)](https://junglewise.ai/threats/technologies/symfony-security-bundle): 5 vulnerabilities - [symfony/security-core (Packagist)](https://junglewise.ai/threats/technologies/symfony-security-core): 5 vulnerabilities - [tcg/voyager (Packagist)](https://junglewise.ai/threats/technologies/tcg-voyager): 5 vulnerabilities - [thinkcmf/thinkcmf (Packagist)](https://junglewise.ai/threats/technologies/thinkcmf-thinkcmf): 5 vulnerabilities - [tpwd/ke_search (Packagist)](https://junglewise.ai/threats/technologies/tpwd-ke-search): 5 vulnerabilities - [typo3/flow (Packagist)](https://junglewise.ai/threats/technologies/typo3-flow): 5 vulnerabilities - [woocommerce/woocommerce (Packagist)](https://junglewise.ai/threats/technologies/woocommerce-woocommerce): 5 vulnerabilities - [aws/aws-sdk-php (Packagist)](https://junglewise.ai/threats/technologies/aws-aws-sdk-php): 4 vulnerabilities - [bref/bref (Packagist)](https://junglewise.ai/threats/technologies/bref-bref): 4 vulnerabilities - [bytefury/crater (Packagist)](https://junglewise.ai/threats/technologies/bytefury-crater): 4 vulnerabilities - [ckeditor/ckeditor (Packagist)](https://junglewise.ai/threats/technologies/ckeditor-ckeditor): 4 vulnerabilities - [codeigniter4/shield (Packagist)](https://junglewise.ai/threats/technologies/codeigniter4-shield): 4 vulnerabilities - [cotonti/cotonti (Packagist)](https://junglewise.ai/threats/technologies/cotonti-cotonti): 4 vulnerabilities - [dcat/laravel-admin (Packagist)](https://junglewise.ai/threats/technologies/dcat-laravel-admin): 4 vulnerabilities - [elmsln/haxcms (Packagist)](https://junglewise.ai/threats/technologies/elmsln-haxcms): 4 vulnerabilities - [evolutioncms/evolution (Packagist)](https://junglewise.ai/threats/technologies/evolutioncms-evolution): 4 vulnerabilities - [ezsystems/ezplatform (Packagist)](https://junglewise.ai/threats/technologies/ezsystems-ezplatform): 4 vulnerabilities - [ezyang/htmlpurifier (Packagist)](https://junglewise.ai/threats/technologies/ezyang-htmlpurifier): 4 vulnerabilities - [filament/tables (Packagist)](https://junglewise.ai/threats/technologies/filament-tables): 4 vulnerabilities - [filegator/filegator (Packagist)](https://junglewise.ai/threats/technologies/filegator-filegator): 4 vulnerabilities - [flarum/framework (Packagist)](https://junglewise.ai/threats/technologies/flarum-framework): 4 vulnerabilities - [friendsofsymfony/user-bundle (Packagist)](https://junglewise.ai/threats/technologies/friendsofsymfony-user-bundle): 4 vulnerabilities - [froala/wysiwyg-editor (Packagist)](https://junglewise.ai/threats/technologies/froala-wysiwyg-editor): 4 vulnerabilities - [ibexa/fieldtype-richtext (Packagist)](https://junglewise.ai/threats/technologies/ibexa-fieldtype-richtext): 4 vulnerabilities - [knplabs/knp-snappy (Packagist)](https://junglewise.ai/threats/technologies/knplabs-knp-snappy): 4 vulnerabilities - [magento/product-community-edition (Packagist)](https://junglewise.ai/threats/technologies/magento-product-community-edition): 4 vulnerabilities - [moonshine/moonshine (Packagist)](https://junglewise.ai/threats/technologies/moonshine-moonshine): 4 vulnerabilities - [oro/commerce (Packagist)](https://junglewise.ai/threats/technologies/oro-commerce): 4 vulnerabilities - [drupal/ai (Packagist)](https://junglewise.ai/threats/technologies/packagist-drupal-ai): 4 vulnerabilities - [phpunit/phpunit (Packagist)](https://junglewise.ai/threats/technologies/phpunit-phpunit): 4 vulnerabilities - [pixelfed/pixelfed (Packagist)](https://junglewise.ai/threats/technologies/pixelfed-pixelfed): 4 vulnerabilities - [pontedilana/php-weasyprint (Packagist)](https://junglewise.ai/threats/technologies/pontedilana-php-weasyprint): 4 vulnerabilities - [prestashop/ps_checkout (Packagist)](https://junglewise.ai/threats/technologies/prestashop-ps-checkout): 4 vulnerabilities - [pyrocms/pyrocms (Packagist)](https://junglewise.ai/threats/technologies/pyrocms-pyrocms): 4 vulnerabilities - [react/http (Packagist)](https://junglewise.ai/threats/technologies/react-http): 4 vulnerabilities - [reportico-web/reportico (Packagist)](https://junglewise.ai/threats/technologies/reportico-web-reportico): 4 vulnerabilities - [robrichards/xmlseclibs (Packagist)](https://junglewise.ai/threats/technologies/robrichards-xmlseclibs): 4 vulnerabilities - [simplesamlphp/saml2-legacy (Packagist)](https://junglewise.ai/threats/technologies/simplesamlphp-saml2-legacy): 4 vulnerabilities - [sjbr/sr-feuser-register (Packagist)](https://junglewise.ai/threats/technologies/sjbr-sr-feuser-register): 4 vulnerabilities - [sylius/resource-bundle (Packagist)](https://junglewise.ai/threats/technologies/sylius-resource-bundle): 4 vulnerabilities - [symfony/routing (Packagist)](https://junglewise.ai/threats/technologies/symfony-routing): 4 vulnerabilities - [tastyigniter/tastyigniter (Packagist)](https://junglewise.ai/threats/technologies/tastyigniter-tastyigniter): 4 vulnerabilities - [torrentpier/torrentpier (Packagist)](https://junglewise.ai/threats/technologies/torrentpier-torrentpier): 4 vulnerabilities - [typo3/cms-frontend (Packagist)](https://junglewise.ai/threats/technologies/typo3-cms-frontend): 4 vulnerabilities - [web-auth/webauthn-framework (Packagist)](https://junglewise.ai/threats/technologies/web-auth-webauthn-framework): 4 vulnerabilities - [wintercms/winter (Packagist)](https://junglewise.ai/threats/technologies/wintercms-winter): 4 vulnerabilities - [wp-graphql/wp-graphql (Packagist)](https://junglewise.ai/threats/technologies/wp-graphql-wp-graphql): 4 vulnerabilities - [wp-premium/gravityforms (Packagist)](https://junglewise.ai/threats/technologies/wp-premium-gravityforms): 4 vulnerabilities - [yiisoft/yii (Packagist)](https://junglewise.ai/threats/technologies/yiisoft-yii): 4 vulnerabilities - [zendframework/zendopenid (Packagist)](https://junglewise.ai/threats/technologies/zendframework-zendopenid): 4 vulnerabilities - [aimeos/ai-admin-graphql (Packagist)](https://junglewise.ai/threats/technologies/aimeos-ai-admin-graphql): 3 vulnerabilities - [aimeos/aimeos-core (Packagist)](https://junglewise.ai/threats/technologies/aimeos-aimeos-core): 3 vulnerabilities - [amphp/http-client (Packagist)](https://junglewise.ai/threats/technologies/amphp-http-client): 3 vulnerabilities - [apache-solr-for-typo3/solr (Packagist)](https://junglewise.ai/threats/technologies/apache-solr-for-typo3-solr): 3 vulnerabilities - [appwrite/server-ce (Packagist)](https://junglewise.ai/threats/technologies/appwrite-server-ce): 3 vulnerabilities - [artesaos/seotools (Packagist)](https://junglewise.ai/threats/technologies/artesaos-seotools): 3 vulnerabilities - [badaso/core (Packagist)](https://junglewise.ai/threats/technologies/badaso-core): 3 vulnerabilities - [bbpress/bbpress (Packagist)](https://junglewise.ai/threats/technologies/bbpress-bbpress): 3 vulnerabilities - [cakephp/database (Packagist)](https://junglewise.ai/threats/technologies/cakephp-database): 3 vulnerabilities - [coreshop/core-shop (Packagist)](https://junglewise.ai/threats/technologies/coreshop-core-shop): 3 vulnerabilities - [doctrine/orm (Packagist)](https://junglewise.ai/threats/technologies/doctrine-orm): 3 vulnerabilities - [enhavo/enhavo-app (Packagist)](https://junglewise.ai/threats/technologies/enhavo-enhavo-app): 3 vulnerabilities - [ezsystems/ezplatform-admin-ui-assets (Packagist)](https://junglewise.ai/threats/technologies/ezsystems-ezplatform-admin-ui-assets): 3 vulnerabilities - [ezsystems/ezplatform-richtext (Packagist)](https://junglewise.ai/threats/technologies/ezsystems-ezplatform-richtext): 3 vulnerabilities - [facade/ignition (Packagist)](https://junglewise.ai/threats/technologies/facade-ignition): 3 vulnerabilities - [firebase/php-jwt (Packagist)](https://junglewise.ai/threats/technologies/firebase-php-jwt): 3 vulnerabilities - [fixpunkt/fp-newsletter (Packagist)](https://junglewise.ai/threats/technologies/fixpunkt-fp-newsletter): 3 vulnerabilities - [geshi/geshi (Packagist)](https://junglewise.ai/threats/technologies/geshi-geshi): 3 vulnerabilities - [goalgorilla/open_social (Packagist)](https://junglewise.ai/threats/technologies/goalgorilla-open-social): 3 vulnerabilities - [google/protobuf (Packagist)](https://junglewise.ai/threats/technologies/google-protobuf): 3 vulnerabilities - [ibexa/user (Packagist)](https://junglewise.ai/threats/technologies/ibexa-user): 3 vulnerabilities - [illuminate/auth (Packagist)](https://junglewise.ai/threats/technologies/illuminate-auth): 3 vulnerabilities - [joomla/framework (Packagist)](https://junglewise.ai/threats/technologies/joomla-framework): 3 vulnerabilities - [laravel/laravel (Packagist)](https://junglewise.ai/threats/technologies/laravel-laravel): 3 vulnerabilities - [matomo/matomo (Packagist)](https://junglewise.ai/threats/technologies/matomo-matomo): 3 vulnerabilities - [mediawiki/cargo (Packagist)](https://junglewise.ai/threats/technologies/mediawiki-cargo): 3 vulnerabilities - [mongodb/mongodb (Packagist)](https://junglewise.ai/threats/technologies/mongodb-mongodb): 3 vulnerabilities - [nitsan/ns-backup (Packagist)](https://junglewise.ai/threats/technologies/nitsan-ns-backup): 3 vulnerabilities - [noumo/easyii (Packagist)](https://junglewise.ai/threats/technologies/noumo-easyii): 3 vulnerabilities - [onelogin/php-saml (Packagist)](https://junglewise.ai/threats/technologies/onelogin-php-saml): 3 vulnerabilities - [orchid/platform (Packagist)](https://junglewise.ai/threats/technologies/orchid-platform): 3 vulnerabilities - [phalcon/cphalcon (Packagist)](https://junglewise.ai/threats/technologies/phalcon-cphalcon): 3 vulnerabilities - [phenx/php-svg-lib (Packagist)](https://junglewise.ai/threats/technologies/phenx-php-svg-lib): 3 vulnerabilities - [phpsysinfo/phpsysinfo (Packagist)](https://junglewise.ai/threats/technologies/phpsysinfo-phpsysinfo): 3 vulnerabilities - [pimcore/studio-backend-bundle (Packagist)](https://junglewise.ai/threats/technologies/pimcore-studio-backend-bundle): 3 vulnerabilities - [piwik/piwik (Packagist)](https://junglewise.ai/threats/technologies/piwik-piwik): 3 vulnerabilities - [prestashop/productcomments (Packagist)](https://junglewise.ai/threats/technologies/prestashop-productcomments): 3 vulnerabilities - [qcubed/qcubed (Packagist)](https://junglewise.ai/threats/technologies/qcubed-qcubed): 3 vulnerabilities - [quickapps/cms (Packagist)](https://junglewise.ai/threats/technologies/quickapps-cms): 3 vulnerabilities - [rudloff/alltube (Packagist)](https://junglewise.ai/threats/technologies/rudloff-alltube): 3 vulnerabilities - [saloonphp/saloon (Packagist)](https://junglewise.ai/threats/technologies/saloonphp-saloon): 3 vulnerabilities - [silverstripe/userforms (Packagist)](https://junglewise.ai/threats/technologies/silverstripe-userforms): 3 vulnerabilities - [squizlabs/php_codesniffer (Packagist)](https://junglewise.ai/threats/technologies/squizlabs-php-codesniffer): 3 vulnerabilities - [swiftmailer/swiftmailer (Packagist)](https://junglewise.ai/threats/technologies/swiftmailer-swiftmailer): 3 vulnerabilities - [sylius/paypal-plugin (Packagist)](https://junglewise.ai/threats/technologies/sylius-paypal-plugin): 3 vulnerabilities - [symfony/cache (Packagist)](https://junglewise.ai/threats/technologies/symfony-cache): 3 vulnerabilities - [symfony/form (Packagist)](https://junglewise.ai/threats/technologies/symfony-form): 3 vulnerabilities - [symfony/framework-bundle (Packagist)](https://junglewise.ai/threats/technologies/symfony-framework-bundle): 3 vulnerabilities - [symfony/mime (Packagist)](https://junglewise.ai/threats/technologies/symfony-mime): 3 vulnerabilities - [symfony/ux-autocomplete (Packagist)](https://junglewise.ai/threats/technologies/symfony-ux-autocomplete): 3 vulnerabilities - [symfony/validator (Packagist)](https://junglewise.ai/threats/technologies/symfony-validator): 3 vulnerabilities - [typo3/cms-recycler (Packagist)](https://junglewise.ai/threats/technologies/typo3-cms-recycler): 3 vulnerabilities - [typo3/neos (Packagist)](https://junglewise.ai/threats/technologies/typo3-neos): 3 vulnerabilities - [typo3/phar-stream-wrapper (Packagist)](https://junglewise.ai/threats/technologies/typo3-phar-stream-wrapper): 3 vulnerabilities - [unisharp/laravel-filemanager (Packagist)](https://junglewise.ai/threats/technologies/unisharp-laravel-filemanager): 3 vulnerabilities - [uvdesk/community-skeleton (Packagist)](https://junglewise.ai/threats/technologies/uvdesk-community-skeleton): 3 vulnerabilities - [verbb/comments (Packagist)](https://junglewise.ai/threats/technologies/verbb-comments): 3 vulnerabilities - [verot/class.upload.php (Packagist)](https://junglewise.ai/threats/technologies/verot-class-upload-php): 3 vulnerabilities - [web-auth/webauthn-lib (Packagist)](https://junglewise.ai/threats/technologies/web-auth-webauthn-lib): 3 vulnerabilities - [webonyx/graphql-php (Packagist)](https://junglewise.ai/threats/technologies/webonyx-graphql-php): 3 vulnerabilities - [winter/wn-cms-module (Packagist)](https://junglewise.ai/threats/technologies/winter-wn-cms-module): 3 vulnerabilities - [winter/wn-system-module (Packagist)](https://junglewise.ai/threats/technologies/winter-wn-system-module): 3 vulnerabilities - [yungifez/skuul (Packagist)](https://junglewise.ai/threats/technologies/yungifez-skuul): 3 vulnerabilities - [zencart/zencart (Packagist)](https://junglewise.ai/threats/technologies/zencart-zencart): 3 vulnerabilities - [zendframework/zend-diactoros (Packagist)](https://junglewise.ai/threats/technologies/zendframework-zend-diactoros): 3 vulnerabilities - [zendframework/zend-http (Packagist)](https://junglewise.ai/threats/technologies/zendframework-zend-http): 3 vulnerabilities - [zendframework/zendrest (Packagist)](https://junglewise.ai/threats/technologies/zendframework-zendrest): 3 vulnerabilities - [zendframework/zendservice-amazon (Packagist)](https://junglewise.ai/threats/technologies/zendframework-zendservice-amazon): 3 vulnerabilities - [zendframework/zendservice-api (Packagist)](https://junglewise.ai/threats/technologies/zendframework-zendservice-api): 3 vulnerabilities - [zendframework/zendservice-audioscrobbler (Packagist)](https://junglewise.ai/threats/technologies/zendframework-zendservice-audioscrobbler): 3 vulnerabilities - [zendframework/zendservice-nirvanix (Packagist)](https://junglewise.ai/threats/technologies/zendframework-zendservice-nirvanix): 3 vulnerabilities - [zendframework/zendservice-slideshare (Packagist)](https://junglewise.ai/threats/technologies/zendframework-zendservice-slideshare): 3 vulnerabilities - [zendframework/zendservice-technorati (Packagist)](https://junglewise.ai/threats/technologies/zendframework-zendservice-technorati): 3 vulnerabilities - [zendframework/zendservice-windowsazure (Packagist)](https://junglewise.ai/threats/technologies/zendframework-zendservice-windowsazure): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Packagist package vulnerabilities", https://junglewise.ai/threats/vendors/packagist, 13 November 2026.