Libraries tagged by cve

A deterministic Laravel security gate for CI and deployment pipelines

Go to Download

Laravel security scanner — checks CVEs, hardcoded secrets, SQL injection, XSS and more via a single Artisan command.

Go to Download

Composer meta-package that applies critical and isolated security patches for Magento 2 / Adobe Commerce, released by Adobe

Go to Download

A Magento2 extension that prevents file uploads to the /customer/address_file/upload endpoint.

Go to Download

CPE: Common Platform Enumeration for PHP

Go to Download

Composer plugin that traces vulnerable dependencies to the packages you control and uses Composer's own solver to find the smallest verified upgrade that removes them.

Go to Download

Patch for CVE-2025-54236(a.k.a Session Reaper) which allows customer account takeover and RCE under certain conditions. This patch is actually a Magento 2 extension and universal compatible for Magento 2.3 & 2.4. If you cannot upgrade Magento or cannot apply the official hotfix, try this one.

Go to Download

Applies Adobe's official APSB26-146 (CVE-2026-75650) StyleSmuggler fix to Magento Open Source and Mage-OS automatically, detecting your version. No cweagans/composer-patches or enable-patching needed.

Go to Download

Linter for Neos Fusion

Go to Download

A PHP wrapper for some common Cvent SOAP API functions

Go to Download

Multi-source vulnerability lookups for PHP and Laravel — OSV, NVD, GitHub Advisories, MITRE, EUVD, CVE-Search, Red Hat, Shodan CVEDB, OSS Index, VulnCheck and Snyk behind one contract, with CVSS v2/v3/v4, EPSS/KEV enrichment, change detection and a self-audit command.

Go to Download

A convenience tool to easily check a given PHP version against a regularly updated list of CVE exploits, new releases, and end of life dates

Go to Download

Magento 2 patch for CVE-2022-24086, CVE-2022-24087. Fix the RCE vulnerability and related bugs by performing deep template variable escaping. If you cannot upgrade Magento or cannot apply the official patches, try this one.

Go to Download

An alternative solution(as a Magento 2 extension) to fix the XXE vulnerability CVE-2024-34102(aka Cosmic Sting). If you cannot upgrade Magento or cannot apply the official patch, try this one.

Go to Download

Magento 2 security modules for Qoliber open source patches and fixes.

Go to Download