Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
.github/workflows
Configure CI to run the validator
Dec 28, 2020
3f/pygmentize
Point to 1.x instead of master.
May 17, 2017
adodb/adodb-php
add potential sql injection vector in adodb-php
Apr 30, 2018
alterphp/easyadmin-extension-bundle
Add easy-admin extension bundle security flaw
Oct 2, 2018
amphp
Add https://github.com/amphp/http-client/releases/tag/v4.4.0
Jun 16, 2020
api-platform/core
API Platform: assign CVE number to 2019-01-15
Feb 14, 2019
asymmetricrypt/asymmetricrypt
Add advisories for (abandoned?) projects with unfixed vulnerabilities.
Feb 21, 2018
aws/aws-sdk-php
naming convention - cve identifier
Dec 24, 2018
brightlocal/phpwhois
Add CVE-2015-5243: phpWhois PHP Code Injection
Aug 1, 2018
bugsnag/bugsnag-laravel
Added bugsnag laravel vulnerability
Jul 19, 2016
cakephp/cakephp
-
Apr 24, 2019
cart2quote/module-quotation
Note the Magento 1 Cart2Quote extension RCE vulnerability
Feb 3, 2017
cartalyst/sentry
use HTTPS whenever possible
Apr 20, 2018
codeigniter/framework
use HTTPS whenever possible
Apr 20, 2018
composer/composer
add CVE-2015-8371.yaml
Feb 14, 2016
contao-components/mediaelement
Update the Contao data and add CVE-2017-10993.
Jul 12, 2017
contao
Add Contao CVE-2019-19712, CVE-2019-19714 and CVE-2019-19745
Dec 17, 2019
datadog/dd-trace
Add ddtrace 0.30.0 and 0.30.1
Sep 26, 2019
david-garcia/phpwhois
Add CVE-2015-5243: phpWhois PHP Code Injection
Aug 1, 2018
doctrine
naming convention - cve identifier
Dec 24, 2018
dompdf/dompdf
Add more “disclosed” dompdf issues
Feb 6, 2016
drupal
Add assigned CVEs to Drupal advisories
Dec 11, 2020
endroid/qr-code-bundle
Create 2019-12-22.yaml
Jan 1, 2020
erusev/parsedown
Use assigned CVE
Apr 6, 2019
ezsystems
Ibexa / ezsystems issue 2020-007
Dec 1, 2020
ezyang/htmlpurifier
Add CVEs for ezyang/htmlpurifier
Sep 15, 2018
firebase/php-jwt
Add the advisory for the firebase/php-jwt vulnerability
Apr 2, 2015
fooman/tcpdf
fixed typo
Oct 15, 2018
fossar/tcpdf-parser
Fix reference for fossar/tcpdf
Oct 14, 2018
friendsofsymfony
Update specific time
Mar 15, 2020
fuel/core
Use correct version constraints.
May 10, 2018
gos/web-socket-bundle
Fix branch key
Jul 6, 2020
gree/jose
Add the advisory for the gree/jose vulnerability
Dec 11, 2017
gregwar/rst
Add Gregwar/RST < v1.0.3
Oct 31, 2016
guzzlehttp/guzzle
fixed issues with some YAML files
Feb 21, 2018
illuminate
Update Laravel security advisory
Feb 2, 2021
ivankristianto/phpwhois
Add CVE-2015-5243: phpWhois PHP Code Injection
Aug 1, 2018
james-heinrich/getid3
Add CVE for james-heinrich/getid3
Sep 15, 2018
joomla/session
Correct version
Dec 14, 2015
jsmitty12/phpwhois
Add CVE-2015-5243: phpWhois PHP Code Injection
Aug 1, 2018
kazist/phpwhois
Add CVE-2015-5243: phpWhois PHP Code Injection
Aug 1, 2018
kreait/firebase-php
3.8.0 is affected.
Apr 14, 2018
la-haute-societe/tcpdf
Added la-haute-societe/tcpdf, not fixed yet
Oct 14, 2018
laravel
Update Laravel security advisory
Feb 2, 2021
league/commonmark
Add assigned CVE ID to league/commonmark vulnerability
Mar 25, 2019
livewire/livewire
What even are version constraints
Sep 23, 2020
magento
2.3.3 is not necessary in version constraints
Nov 19, 2019
mautic/core
[mautic/core] fix version constraints
Jan 18, 2021
mediawiki/core
Add 2018-2019 CVEs for MediaWiki
Nov 18, 2020
monolog/monolog
be more strict with the YAML syntax being used
Dec 12, 2015
namshi/jose
be more strict with the YAML syntax being used
Dec 12, 2015
nette
Merge pull request #493 from dg/patch-1
Oct 2, 2020
nystudio107/craft-seomatic
v3 → 3.x
Jul 3, 2020
nzo/url-encryptor-bundle
Correct affected versions for nayzo/NzoUrlEncryptorBundle
May 4, 2020
onelogin/php-saml
naming convention - cve identifier
Dec 24, 2018
oneup/uploader-bundle
Fix version constraint
Feb 4, 2020
openid/php-openid
Add CVE for openid/php-openid
Sep 15, 2018
oro
use HTTPS whenever possible
Apr 20, 2018
padraic/humbug_get_contents
fixed package name
Feb 19, 2018
pagarme/pagarme-php
Adjust report version range
Mar 1, 2018
paragonie/random_compat
Added in report time
May 3, 2016
passbolt/passbolt_api
Fix several entries time that breaks time parsing
Nov 26, 2020
paypal/merchant-sdk-php
replace advisory link with actual issue URL
Apr 14, 2018
pear/archive_tar
Create CVE-2020-36193.yaml (#1)
Jan 18, 2021
phpmailer/phpmailer
Create CVE-2018-19296.yaml
Nov 16, 2018
phpmyadmin/phpmyadmin
Add 2020 CVEs for phpmyadmin
Nov 19, 2020
phpoffice
Fix CVE-2020-7776 identifier
Jan 1, 2021
phpunit/phpunit
Replaced broken link
Apr 5, 2020
phpwhois/phpwhois
Add CVE-2015-5243: phpWhois PHP Code Injection
Aug 1, 2018
phpxmlrpc/extras
fixed typo in version of phpxmlrpc.
Jan 3, 2018
propel
Removed file not relating to a Composer release
Feb 20, 2018
pusher/pusher-php-server
Add the advisory for the pusher-php-server vulnerability
May 15, 2015
robrichards/xmlseclibs
Add link to security advisory
Nov 7, 2019
sabberworm/php-css-parser
Add CVE-2020-13756
Sep 18, 2020
sabre/dav
be more strict with the YAML syntax being used
Dec 12, 2015
scheb/two-factor-bundle
Add lower version constraint
Dec 26, 2019
sensiolabs/connect
Add new issue in sensiolabs/connect
Jun 8, 2018
serluck/phpwhois
Add CVE-2015-5243: phpWhois PHP Code Injection
Aug 1, 2018
shopware/shopware
fixed some links
Apr 22, 2018
silverstripe
Add entries for issues fixed by Silverstripe CMS 4.6.0 release
Jul 15, 2020
simple-updates/phpwhois
Add CVE-2015-5243: phpWhois PHP Code Injection
Aug 1, 2018
simplesamlphp
add simplesamlphp/simplesamlphp CVE-2020-5301
May 2, 2020
slim/slim
Remove trailing comma and add exact time.
Apr 11, 2018
smarty/smarty
Add CVE-2018-16831
Oct 18, 2020
socalnick/scn-social-auth
ScnSocialAuth XSS Vulnerability
Jan 16, 2015
socialiteproviders/steam
add steam socialite provider authentication bypass
Jan 29, 2021
spoonity/tcpdf
Added spoonity/tcpdf, not fixed yet
Oct 14, 2018
squizlabs/php_codesniffer
Merge pull request #274 from jrfnl/feature/phpcodesniffer-3.0.0
Mar 20, 2018
stormpath/sdk
Add advisories for (abandoned?) projects with unfixed vulnerabilities.
Feb 21, 2018
studio-42/elfinder
CVE-2019-6257
Jan 20, 2020
swiftmailer/swiftmailer
added CVE-2016-10074
Dec 29, 2016
sylius
Add CVE-2020-15245 for sylius/sylius
Oct 20, 2020
symbiote/silverstripe-multivaluefield
Silverstripe issues from 2016-2018
Feb 5, 2020
symfony
Fix component for CVE-2020-15094
Sep 2, 2020
tecnickcom/tcpdf
fixed typo
Oct 15, 2018
thelia
use HTTPS whenever possible
Apr 20, 2018
theonedemon/phpwhois
Add CVE-2015-5243: phpWhois PHP Code Injection
Aug 1, 2018
titon/framework
Add advisories for (abandoned?) projects with unfixed vulnerabilities.
Feb 21, 2018
truckersmp/phpwhois
Add CVE-2015-5243: phpWhois PHP Code Injection
Aug 1, 2018
twig/twig
Add CVE identifiers to twig/twig advisories
Dec 28, 2020
typo3
[TASK] Skip TYPO3-CORE-SA-2020-009 referring to fluidtypo3/typo3
Nov 17, 2020
typo3fluid/fluid
[TASK] Add TYPO3 Fluid security advisory from May 2019
Oct 7, 2020
ua-parser/uap-php
DoS in uap-php
Dec 14, 2018
wallabag/tcpdf
CVE-2018-17057 for wallabag/tcpdf, not fixed yet
Oct 14, 2018
willdurand/js-translation-bundle
Add entry for willdurand/js-translation-bundle
Jul 29, 2014
yiisoft
Yii 2: Unsafe unserialize (CVE-2020-15148)
Sep 18, 2020
zendframework
Updated version constraint, as it requires providing version range
Mar 28, 2019
zetacomponents/mail
naming convention - cve identifier
Dec 24, 2018
zf-commons/zfc-user
naming convention - cve identifier
Dec 24, 2018
zfcampus/zf-apigility-doctrine
naming convention - cve identifier
Dec 24, 2018
zfr/zfr-oauth2-server-module
Fix package name inconsistencies
May 20, 2015
.editorconfig
Add editorconfig with 4 spaces for indentation
Feb 19, 2019
.gitignore
Remove lock file
Oct 29, 2015
LICENSE
added the missing license
Oct 26, 2014
README.md
Use --dir option for symfony security:check
Feb 3, 2021
composer.json
fixed issues with some YAML files
Feb 21, 2018
validator.php
Add a validator ensuring that each branch has a well-formed range
Nov 19, 2019