packagist
Security Advisories in packagist
High
3 days ago
Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC Methods
packagist
leantime/leantime
High
3 days ago
react/http: Unbounded HTTP Client Response Header Buffering Leads to Memory Exhaustion DoS
packagist
react/http
Moderate
9 days ago
Contao: Protected page content is disclosed to anonymous visitors after contao.search.index_protected is disabled
packagist
contao/core-bundle
Moderate
9 days ago
Contao: The registration module re-sends activation mails
packagist
contao/core-bundle
Low
9 days ago
Contao: Cross-site request forgery in custom backend actions
packagist
contao/core-bundle
Critical
9 days ago
Contao: Cross-site scripting in the comments bundle
packagist
contao/comments-bundle
Moderate
9 days ago
Contao: Improper access control in the preview links module
packagist
contao/core-bundle
Moderate
9 days ago
Contao: Improper access control in the table access voter
packagist
contao/core-bundle
Moderate
10 days ago
enshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference Collision
packagist
enshrined/svg-sanitize
Moderate
10 days ago
svg-sanitizer: Mixed-case xlink:HrEf skips the `<use>` nesting-DoS check in Resolver::processReferences
packagist
enshrined/svg-sanitize
Moderate
10 days ago
enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash
packagist
enshrined/svg-sanitize
High
12 days ago
Kunstmaan CMS: MediaBundle extension blacklist bypass allows authenticated administrators to upload executable PHP files leading to remote code execution
packagist
kunstmaan/bundles-cms, kunstmaan/media-bundle
Moderate
13 days ago
Filament: Multi-factor authentication (app) management actions do not require password reauthentication
packagist
filament/filament
Moderate
13 days ago
MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs
packagist
mongodb/mongodb
Moderate
16 days ago
Composer: GHSA-gjfg-22fp-rrxx fix bypass via symlinked package bin path
packagist
composer/composer
Moderate
19 days ago
league/commonmark: DisallowedRawHtml bypassed when a disallowed tag name ends the raw-HTML literal
packagist
league/commonmark
High
19 days ago
league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scan
packagist
league/commonmark
Low
20 days ago
Flysystem: WhitespacePathNormalizer's control-character (CorruptedPathDetected) check is bypassed by malformed UTF-8 in the path, affecting every adapter
packagist
league/flysystem
High
20 days ago
PHPCSUtils: Remote code execution via eval() in AbstractArrayDeclarationSniff::getActualArrayKey()
packagist
phpcsstandards/phpcsutils
Critical
24 days ago
FriendsOfFlarum OAuth: Unauthenticated account takeover via unverified email trust in Discord OAuth provider
packagist
fof/oauth
High
24 days ago
Mediawiki EmbedVideo Extension has stored XSS via malformed src url with $wgEmbedVideoRequireConsent disabled
packagist
starcitizenwiki/embedvideo
High
24 days ago
code16 Sharp vulnerable to stored XSS via iframe srcdoc Attribute
packagist
code16/sharp
High
24 days ago
code16/sharp has a stored XSS via data-html-content Sanitizer Bypass
packagist
code16/sharp
Low
24 days ago
Contao: Server-Side Request Forgery (SSRF) via Unvalidated RSS Feed URL in Feed Reader Module
packagist
contao/core-bundle, contao/contao
High
24 days ago
zbateson/mail-mime-parser has CRLF header injection via attachment filename
packagist
zbateson/mail-mime-parser
High
24 days ago
zbateson/mail-mime-parser has uncontrolled resource consumption (CPU/memory DoS) parsing untrusted MIME
packagist
zbateson/mail-mime-parser
High
24 days ago
phpMyFAQ has SQL Injection in `StopWords::add()` — Unescaped Stop Word Insertion
packagist
thorsten/phpmyfaq, phpmyfaq/phpmyfaq
High
24 days ago
phpMyFAQ's two-factor authentication login bypasses the password factor
packagist
phpmyfaq/phpmyfaq, thorsten/phpmyfaq
High
24 days ago
phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission
packagist
phpmyfaq/phpmyfaq, thorsten/phpmyfaq
High
25 days ago
Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files API
packagist
snipe/snipe-it
High
25 days ago
Snipe-IT: Stored XSS via Custom Field name in asset-list column headers
packagist
snipe/snipe-it
Moderate
25 days ago
REDAXO: Unwhitelisted ORDER BY Column in rex_list Allows Authenticated Column Enumeration
packagist
redaxo/source
High
25 days ago
Formie: Missing authorization on sent notification resend modal exposes submission PII
packagist
verbb/formie
High
26 days ago
Formie: Unauthenticated users can overwrite incomplete submissions via submit action
packagist
verbb/formie
High
26 days ago
Formie: Integration form-settings action allows SSRF and exfiltration of stored integration credentials
packagist
verbb/formie
Moderate
26 days ago
Sulu: JCR-SQL2 injection via `categories` query parameter (unauthenticated)
packagist
sulu/sulu
Moderate
26 days ago
Solspace Freeform: Limited Twig template injection via submitted field values
packagist
solspace/craft-freeform
Moderate
26 days ago
WPGraphQL: Contributor can publish and modify posts without the required capabilities via updatePost
packagist
wp-graphql/wp-graphql
Moderate
26 days ago
REDAXO: Missing CSRF Protection on Package Update Action Allows Forced Addon Updates
packagist
redaxo/source
Moderate
26 days ago
REDAXO: Stored XSS in Mediapool Sync Page via Unescaped Filesystem Filenames
packagist
redaxo/source
Moderate
26 days ago
REDAXO: Stored XSS via Unescaped Media Manager Type Name in `mediaIsInUse()`
packagist
redaxo/source
Moderate
about 1 month ago
Paymenter has a credit-refund double-spend race condition in service downgrade (doUpgrade)
packagist
paymenter/paymenter
High
about 1 month ago
Semantic MediaWiki'a missing authorization in the smwtask API module allows unauthenticated access to admin-only maintenance tasks
packagist
mediawiki/semantic-media-wiki
Moderate
about 1 month ago
Semantic MediaWiki's Special:FacetedSearch cstate hidden inputs enable reflected XSS (residual of CVE-2025-10354)
packagist
mediawiki/semantic-media-wiki
Moderate
about 1 month ago
Semantic MediaWiki affected by reflected XSS in `Special:Ask` via a forged cursor pagination token
packagist
mediawiki/semantic-media-wiki
Moderate
about 1 month ago
Semantic MediaWiki has a query debug output XSS (`DebugFormatter`)
packagist
mediawiki/semantic-media-wiki
Moderate
about 1 month ago
Semantic MediaWiki has an open redirect in Special:URIResolver
packagist
mediawiki/semantic-media-wiki
Moderate
about 1 month ago
Semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS
packagist
mediawiki/semantic-media-wiki
Moderate
about 1 month ago
Semantic MediaWiki has reflected XSS in `Special:SearchByProperty` (`property` and `value` parameters)
packagist
mediawiki/semantic-media-wiki
Moderate
about 1 month ago
Semantic MediaWiki has reflected XSS in Special:Ask plain table headers
packagist
mediawiki/semantic-media-wiki
High
about 1 month ago
Semantic MediaWiki vulnerable to stored XSS through wikitext via improper use of non-reserved data attributes
packagist
mediawiki/semantic-media-wiki
High
about 1 month ago
Grav CMS vulnerable to remote code execution via .zip file upload
packagist
getgrav/grav
High
about 1 month ago
Grav: Missing admin.super guard on core group blueprint access field allows admin.users operator to escalate to super-admin
packagist
getgrav/grav
Moderate
about 1 month ago
Grav: Single invalid UTF-8 byte disables every rule in Security::detectXss(), bypassing the page-content XSS safety gate
packagist
getgrav/grav
Critical
about 1 month ago
Grav: Blueprint dynamic-data bare-function branch is denylist-gated and omits error_log, giving arbitrary file write
packagist
getgrav/grav
Critical
about 1 month ago
Grav: detectXss() misses an event-handler attribute after an unpaired quote in an unquoted attribute value, giving stored XSS
packagist
getgrav/grav
High
about 1 month ago
Grav: Unauthenticated Path Traversal via Missing Directory-Boundary Check in `plugin-asset-map.php` Static Asset Server (`index.php`)
packagist
getgrav/grav
High
about 1 month ago
Grav: Path Traversal in MediaUploadTrait::deleteFile() Allows Arbitrary File Deletion
packagist
getgrav/grav
High
about 1 month ago
react/http: A malformed HTTP chunked body can lead to a denial-of-service and peg the CPU
packagist
react/http
Critical
about 1 month ago
CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection
packagist
cakephp/database, cakephp/cakephp
High
about 1 month ago
Grav: media_directory() Twig function allows filesystem path traversal and file content disclosure from sandboxed page content
packagist
getgrav/grav
High
about 1 month ago
Grav: UserInterface offsetget/offsetexists allow-listed in Twig sandbox let editor-authored content leak hashed_password and 2FA secrets via offsetGet()
packagist
getgrav/grav
High
about 1 month ago
Grav: config_denied_paths default list omits `system`, exposing real secrets (e.g. system.cache.redis.password) via the Twig sandbox when config_access is enabled
packagist
getgrav/grav
High
about 1 month ago
Grav: The system, site, and theme Twig variables bypass the content sandbox entirely and are never covered by config_denied_paths
packagist
getgrav/grav
Low
about 1 month ago
Grav: Non constant time nonce comparison in Utils::verifyNonce() used for CSRF protection
packagist
getgrav/grav
Low
about 1 month ago
Grav: Origin validation bypass in Uri::referrer() and Pages::referrerRoute() via unanchored prefix match
packagist
getgrav/grav
Critical
about 1 month ago
Chamilo LMS CStudio upload flow allows unauthenticated remote code execution
packagist
chamilo/chamilo-lms
Moderate
about 1 month ago
Grav: Stored XSS via Markdown audio/video media <source> URL
packagist
getgrav/grav
Moderate
about 1 month ago
Grav: Stored XSS via quoted-attribute bypass in detectXss
packagist
getgrav/grav
High
about 1 month ago
Grav: Path Traversal in ImageMedium::watermark() — arbitrary file disclosure via publicly-cached images
packagist
getgrav/grav
High
about 1 month ago
Grav: Incomplete callable validation in blueprint dynamic fields allows arbitrary static method invocation and file disclosure
packagist
getgrav/grav
High
about 1 month ago
Grav: FlexDirectory::dynamicDataField() executes arbitrary callables from blueprint data with no validation
packagist
getgrav/grav
Moderate
about 1 month ago
Grav: Decompression-bomb size cap bypassed by forged ZIP size in ZipArchiver/Installer
packagist
getgrav/grav
Moderate
about 1 month ago
Grav: Stored CSS injection via Markdown image resize() bypasses prior media style sanitizers in Grav
packagist
getgrav/grav
Moderate
about 1 month ago
Grav: XSS Blueprint Validation Bypass via Twig String Concatenation
packagist
getgrav/grav
Moderate
about 1 month ago
Grav CMS — Improper Handling of Highly Compressed Data in Installer::unZip()
packagist
getgrav/grav
Low
about 1 month ago
October CMS: Incomplete Scheme Validation in Image Resizer
packagist
october/october
Low
about 1 month ago
October CMS: PHP Object Injection via Backend Widget Session Storage
packagist
october/system
Low
about 1 month ago
October CMS: Safe Mode Sandbox Bypass via Session Store and Forwarded Builder Calls
packagist
october/system
High
about 1 month ago
Shopper: Missing authorization on product removal actions in CollectionProducts component
packagist
shopper/framework
Moderate
about 1 month ago
Shopper: Media sub-form store() still lacks authorization (Incomplete fix for GHSA-h4mp-g9c6-xwph)
packagist
shopper/framework
High
about 1 month ago
Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component
packagist
shopper/framework
High
about 1 month ago
Shopper: privilege escalation via improper Livewire admin component authorization
packagist
shopper/framework
Moderate
about 1 month ago
Shopping privilege escalation through missing authorization in Settings components
packagist
shopper/framework
Moderate
about 1 month ago
Shopper: Negative discount values accepted and propagated through order calculation pipeline
packagist
shopper/framework
High
about 1 month ago
Shopper: Authorization bypass in Filament bulk actions allows browse-only staff to mass-delete attributes/tags and mass-toggle visibility of brands/categories/suppliers
packagist
shopper/framework
High
about 1 month ago
Pimcore: SQL Injection in Custom Reports via Malicious Report Configuration
packagist
pimcore/pimcore
High
about 1 month ago
mongodb: Reject "." and NUL bytes in database and collection names
packagist
mongodb/mongodb
High
about 1 month ago
Composer arbitrary command execution via a malicious package's Perforce source URL
packagist
composer/composer
Moderate
about 1 month ago
phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery
packagist
phpseclib/phpseclib
Critical
about 1 month ago
Predis: Redis command injection and denial of service via CRLF smuggling in pipelined commands on aggregate connections
packagist
predis/predis
Critical
about 1 month ago
CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriver
packagist
cakephp/database, cakephp/cakephp
High
about 1 month ago
CakePHP: SmtpTransport vulnerable to CRLF header injection
packagist
cakephp/cakephp
High
about 1 month ago
Laravel Excel writes exports outside the configured filesystem disk when given a caller-controlled path
packagist
maatwebsite/excel
High
about 2 months ago
Grav: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challenge
packagist
getgrav/grav
Moderate
about 2 months ago
Grav: Twig sandbox config exfiltration via grav.offsetGet + dump filter (CVE-2026-44738 bypass)
packagist
getgrav/grav
Filter by Severity
Filter by Package
moodle/moodle
437
magento/community-edition
361
typo3/cms
189
magento/project-community-edition
161
wwbn/avideo
144
pimcore/pimcore
136
typo3/cms-core
128
craftcms/cms
127
dolibarr/dolibarr
126
concrete5/concrete5
121
thorsten/phpmyfaq
112
drupal/core
111
phpmyadmin/phpmyadmin
107
librenms/librenms
106
microweber/microweber
106
symfony/symfony
100
getgrav/grav
99
silverstripe/framework
93
drupal/drupal
83
snipe/snipe-it
81
mantisbt/mantisbt
74
shopware/platform
74
shopware/core
65
froxlor/froxlor
60
mautic/core
57
baserproject/basercms
56
getkirby/cms
51
admidio/admidio
50
phpmyfaq/phpmyfaq
47
statamic/cms
44
intelliants/subrion
42
nilsteampassnet/teampass
42
showdoc/showdoc
42
contao/core-bundle
40
ci4-cms-erp/ci4ms
36
shopware/shopware
34
zendframework/zendframework1
34
kimai/kimai
33
phpoffice/phpspreadsheet
31
prestashop/prestashop
31
yeswiki/yeswiki
31
pocketmine/pocketmine-mp
30
mediawiki/core
28
centreon/centreon
27
funadmin/funadmin
26
openmage/magento-lts
26
facturascripts/facturascripts
26
cockpit-hq/cockpit
26
laravel/framework
26
grumpydictator/firefly-iii
26
contao/contao
25
october/system
25
typo3/cms-backend
25
twig/twig
24
magento/core
24
sylius/sylius
23
simplesamlphp/simplesamlphp
23
remdex/livehelperchat
23
phpoffice/phpexcel
23
zendframework/zendframework
23
tribalsystems/zenario
22
cakephp/cakephp
22
feehi/cms
21
craftcms/commerce
21
bagisto/bagisto
20
dompdf/dompdf
20
symfony/security-http
20
alextselegidis/easyappointments
20
pterodactyl/panel
19
codeigniter4/framework
19
topthink/framework
19
sulu/sulu
18
genix/cms
18
redaxo/source
18
league/commonmark
18
devcode-it/openstamanager
18
forkcms/forkcms
18
smarty/smarty
18
francoisjacquet/rosariosis
17
opencart/opencart
17
symfony/security
17
yetiforce/yetiforce-crm
17
nukeviet/nukeviet
17
studio-42/elfinder
17
composer/composer
17
phpbb/phpbb
17
pimcore/admin-ui-classic-bundle
17
WWBN/AVideo
16
ec-cube/ec-cube
16
silverstripe/cms
16
bolt/bolt
15
ezsystems/ezpublish-kernel
15
tinymce/tinymce
15
tinymce
15
guzzlehttp/guzzle
15
winter/wn-backend-module
15
TinyMCE
15
symfony/http-foundation
14
phpmailer/phpmailer
14
modx/revolution
14
feehi/feehicms
14
lavalite/cms
14
october/october
13
pagekit/pagekit
13
impresscms/impresscms
13
elefant/cms
13
leantime/leantime
13
yiisoft/yii2
12
shopper/framework
12
wallabag/wallabag
12
ezsystems/ezpublish-legacy
11
backpack/crud
11
phpseclib/phpseclib
11
spatie/browsershot
10
verbb/formie
10
roundcube/roundcubemail
10
mediawiki/semantic-media-wiki
10
ezsystems/ezplatform-admin-ui
10
ssddanbrown/bookstack
10
billz/raspap-webgui
10
ezsystems/ezplatform-kernel
10
croogo/croogo
10
pimcore/customer-management-framework-bundle
9
in2code/powermail
9
in2code/femanager
9
concrete5/core
9
starcitizentools/citizen-skin
9
krayin/laravel-crm
9
azuracast/azuracast
9
simplesamlphp/saml2
9
kevinpapst/kimai2
9
flarum/core
9
contao/core
9
yourls/yourls
9
opensource-workshop/connect-cms
9
october/cms
8
typo3/cms-form
8
silverstripe/graphql
8
gilacms/gila
8
tecnickcom/tcpdf
8
directmailteam/direct-mail
8
limesurvey/limesurvey
8
api-platform/core
8
phanan/koel
8
symfony/http-kernel
8
vrana/adminer
8
backdrop/backdrop
8
filament/filament
8
code16/sharp
8
silverstripe/admin
8
codiad/codiad
8
joomla/joomla-cms
8
privatebin/privatebin
8
egroupware/egroupware
7
wpglobus/wpglobus
7
october/backend
7
getformwork/formwork
7
passbolt/passbolt_api
7
enshrined/svg-sanitize
7
idno/known
7
paymenter/paymenter
7
yiisoft/yii2-dev
7
unopim/unopim
7
shopxo/shopxo
7
october/rain
6
mineadmin/mineadmin
6
nystudio107/craft-seomatic
6
org.webjars:bootstrap
6
gleez/cms
6
symfony/ux-live-component
6
twbs/bootstrap
6
drupal/core-recommended
6
auth0/symfony
6
silverstripe/assets
6
pheditor/pheditor
6
processwire/processwire
6
dweeves/magmi
6
bootstrap
6
bootstrap
6
solspace/craft-freeform
6
typo3/html-sanitizer
6
ibexa/admin-ui
6
adodb/adodb-php
6
bootstrap
6
zoujingli/thinkadmin
6
pear/archive_tar
6
auth0/wordpress
6
typo3/cms-install
6
oro/platform
6
guzzlehttp/psr7
6
icecoder/icecoder
6
tpwd/ke_search
5
cachethq/cachet
5
bootstrap-sass
5
anchorcms/anchor-cms
5
livewire/livewire
5
juzaweb/cms
5
symfony/html-sanitizer
5
flightphp/core
5
phpxmlrpc/phpxmlrpc
5
Filter by Repository
https://github.com/moodle/moodle
250
https://github.com/pimcore/pimcore
116
https://github.com/TYPO3/typo3
93
https://github.com/microweber/microweber
90
https://github.com/librenms/librenms
77
https://github.com/thorsten/phpmyfaq
69
https://github.com/silverstripe/silverstripe-framework
68
https://github.com/symfony/symfony
64
https://github.com/Dolibarr/dolibarr
60
https://github.com/mautic/mautic
46
https://github.com/phpmyadmin/phpmyadmin
45
https://github.com/concretecms/concretecms
44
https://github.com/mantisbt/mantisbt
42
https://github.com/shopware/platform
42
https://github.com/craftcms/cms
41
https://github.com/shopware/shopware
40
https://github.com/star7th/showdoc
39
https://github.com/magento/magento2
38
https://github.com/octobercms/october
36
https://github.com/snipe/snipe-it
30
https://github.com/contao/contao
30
https://github.com/baserproject/basercms
26
https://github.com/froxlor/froxlor
26
https://github.com/pmmp/PocketMine-MP
25
https://github.com/getgrav/grav
24
https://github.com/PrestaShop/PrestaShop
23
https://github.com/firefly-iii/firefly-iii
23
https://github.com/nilsteampassnet/TeamPass
23
https://github.com/livehelperchat/livehelperchat
23
https://github.com/TYPO3/TYPO3.CMS
23
https://github.com/getkirby/kirby
22
https://github.com/PHPOffice/PhpSpreadsheet
22
https://github.com/laravel/framework
21
https://github.com/funadmin/funadmin
20
https://github.com/TYPO3-CMS/core
19
https://github.com/simplesamlphp/simplesamlphp
19
https://github.com/intelliants/subrion
19
https://github.com/nilsteampassnet/teampass
19
https://github.com/OpenMage/magento-lts
18
https://github.com/liufee/cms
17
https://github.com/yetiforcecompany/yetiforcecrm
16
https://github.com/forkcms/forkcms
16
https://github.com/centreon/centreon
15
https://github.com/dompdf/dompdf
15
https://github.com/drupal/core
15
https://github.com/zendframework/zendframework
15
https://github.com/PHPMailer/PHPMailer
15
https://github.com/thorsten/phpMyFAQ
15
https://github.com/pimcore/admin-ui-classic-bundle
14
https://github.com/cockpit-hq/cockpit
14
https://sourceforge.net/projects/phpmyadmin.sourceforge.net
12
https://github.com/YesWiki/yeswiki
12
https://github.com/modxcms/revolution
12
https://github.com/yiisoft/yii2
12
https://github.com/codeigniter4/CodeIgniter4
12
https://github.com/smarty-php/smarty
12
https://github.com/centreon/centreon-archived
12
https://github.com/Studio-42/elFinder
11
https://github.com/Leantime/leantime
11
https://github.com/tinymce/tinymce
11
https://github.com/sulu/sulu
11
https://github.com/top-think/framework
11
https://github.com/dolibarr/dolibarr
11
https://github.com/Sylius/Sylius
11
https://github.com/WWBN/AVideo
11
https://github.com/cakephp/cakephp
11
https://github.com/bolt/bolt
10
https://github.com/opencart/opencart
10
https://github.com/semplon/GeniXCMS
10
https://github.com/wallabag/wallabag
10
https://github.com/alextselegidis/easyappointments
9
https://github.com/spatie/browsershot
9
https://github.com/LavaLite/cms
9
https://github.com/kevinpapst/kimai2
9
https://github.com/pterodactyl/panel
9
https://github.com/bagisto/bagisto
9
https://github.com/statamic/cms
9
https://github.com/neorazorx/facturascripts
9
https://github.com/ezsystems/ezpublish-kernel
9
https://github.com/StarCitizenTools/mediawiki-skins-Citizen
9
https://github.com/pimcore/customer-data-framework
8
https://github.com/francoisjacquet/rosariosis
8
https://github.com/flarum/framework
8
https://github.com/RaspAP/raspap-webgui
8
https://github.com/twigphp/Twig
8
https://github.com/Froxlor/Froxlor
8
https://github.com/admidio/admidio
8
https://github.com/croogo/croogo
8
https://github.com/TribalSystems/Zenario
8
https://github.com/tecnickcom/TCPDF
8
https://github.com/ezsystems/ezplatform-admin-ui
8
https://github.com/GilaCMS/gila
8
https://github.com/pagekit/pagekit
7
https://github.com/wintercms/winter
7
https://github.com/composer/composer
7
https://github.com/unopim/unopim
7
https://github.com/ezsystems/ezplatform-kernel
7
https://github.com/Codiad/Codiad
7
https://github.com/passbolt/passbolt_api
7
https://github.com/d4wner/Vulnerabilities-Report
7
https://github.com/auth0/auth0-PHP
6
https://github.com/ezsystems/ezpublish-legacy
6
https://github.com/api-platform/core
6
https://github.com/ADOdb/ADOdb
6
https://github.com/oroinc/orocommerce
6
https://github.com/bookstackapp/bookstack
6
https://github.com/gleez/cms
6
https://github.com/Admidio/admidio
6
https://github.com/guzzle/guzzle
6
https://github.com/ImpressCMS/impresscms
6
https://github.com/twbs/bootstrap
6
https://gitlab.com/francoisjacquet/rosariosis
6
https://github.com/LimeSurvey/LimeSurvey
6
https://github.com/vrana/adminer
6
https://github.com/nystudio107/craft-seomatic
6
https://github.com/silverstripe/silverstripe-graphql
6
https://github.com/Bottelet/DaybydayCRM
5
https://github.com/dub-flow/vulnerability-research
5
https://github.com/oroinc/platform
5
https://github.com/in2code-de/femanager
5
https://github.com/nukeviet/nukeviet
5
https://github.com/backdrop/backdrop
5
https://github.com/shopware5/shopware
5
https://github.com/thinkcmf/thinkcmf
5
https://github.com/zendframework/zf1
5
https://github.com/contao/core
5
https://github.com/gggeek/phpxmlrpc
5
https://github.com/getformwork/formwork
5
https://github.com/jbroadway/elefant
5
https://github.com/ibexa/admin-ui
5
https://github.com/ibexa/core
5
https://github.com/pear/Archive_Tar
5
https://github.com/zoujingli/ThinkAdmin
4
https://github.com/in2code-de/powermail
4
https://github.com/darylldoyle/svg-sanitizer
4
https://github.com/yourls/yourls
4
https://github.com/Sylius/SyliusResourceBundle
4
https://github.com/TYPO3/html-sanitizer
4
https://github.com/froxlor/Froxlor
4
https://github.com/PrivateBin/PrivateBin
4
https://github.com/fiveai/Cachet
4
https://github.com/appwrite/appwrite
4
https://github.com/ezsystems/ezplatform
4
https://github.com/oroinc/crm
4
https://github.com/progprnv/CVE-Reports
4
https://github.com/BookStackApp/BookStack
4
https://github.com/crater-invoice/crater
4
https://github.com/haxtheweb/issues
4
https://github.com/reportico-web/reportico
4
https://github.com/phpservermon/phpservermon
4
https://github.com/ckeditor/ckeditor4
4
https://github.com/ezsystems/ezplatform-richtext
4
https://github.com/pixelfed/pixelfed
4
https://github.com/brefphp/bref
4
https://github.com/silverstripe/silverstripe-admin
4
https://github.com/GiacoLenzo2109/MoonShine_Software_PoCs
4
https://github.com/kimai/kimai
4
https://github.com/codeigniter4/shield
4
https://github.com/livewire/livewire
4
https://github.com/Cockpit-HQ/Cockpit
4
https://github.com/hieuminhnv/Zenario-CMS-last-version
4
https://github.com/thephpleague/commonmark
3
https://github.com/orchidsoftware/platform
3
https://github.com/uvdesk/community-skeleton
3
https://github.com/PrestaShop/productcomments
3
https://github.com/phpbb/phpbb-app
3
https://github.com/elgg/elgg
3
https://github.com/verbb/formie
3
https://github.com/uasoft-indonesia/badaso
3
https://github.com/PrestaShopCorp/ps_checkout
3
https://github.com/ezsystems/ezplatform-http-cache
3
https://github.com/jquery/jquery
3
https://github.com/artesaos/seotools
3
https://github.com/thedevdojo/voyager
3
https://github.com/Athlon1600/php-proxy-app
3
https://github.com/grokability/snipe-it
3
https://github.com/qcubed/qcubed
3
https://github.com/woocommerce/woocommerce
3
https://github.com/yiisoft/yii
3
https://github.com/torrentpier/torrentpier
3
https://github.com/flarum/core
3
https://github.com/dd3x3r/enhavo
3
https://github.com/github/advisory-database
3
https://github.com/phpbb/phpbb
3
https://github.com/aimeos/ai-admin-graphql
3
https://github.com/TYPO3-Solr/ext-solr
3
https://github.com/guzzle/psr7
3
https://github.com/UniSharp/laravel-filemanager
3
https://github.com/idno/known
3
https://github.com/liufee/feehicms
3
https://github.com/facade/ignition
3
https://github.com/xjzzzxx/vulFound
3
https://github.com/nitsan-technologies/ns_backup
3
https://github.com/joomla/joomla-cms
3
https://github.com/FriendsOfSymfony/FOSUserBundle
3
https://github.com/ibexa/fieldtype-richtext
3
https://github.com/quickapps/cms
3
https://github.com/redaxo/redaxo
3
https://github.com/opensource-workshop/connect-cms
3