Packagist vulnerabilities
6,423 vulnerabilities and 1 malicious packages in Packagist. moodle/moodle has the most reviewed advisories.
Most exploited Packagist vulnerabilities
- CVE-2025-32432 Craft CMS Code Injection
- CVE-2025-49113 RoundCube Webmail Deserialization of Untrusted Data
- CVE-2026-9082 Drupal Core SQL Injection
- CVE-2024-34102 Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE)
- CVE-2022-24086 Adobe Commerce and Magento Open Source Improper Input Validation
- CVE-2021-3129 Laravel Ignition File Upload
- CVE-2018-7600 Drupal Core Remote Code Execution
- CVE-2017-9841 PHPUnit Command Injection
- CVE-2016-10033 PHPMailer Command Injection
- CVE-2024-56145 Craft CMS Code Injection
- CVE-2025-54068 Laravel Livewire Code Injection
- CVE-2025-54236 Adobe Commerce and Magento Improper Input Validation
Packagist packages with the most advisories
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.