Packagist Vulnerability Scanner
The main Composer repository for PHP packages. Powers frameworks like Laravel, Symfony, and thousands of applications.
Scan your composer.lock online
Free dependency vulnerability scan for Packagist — no signup required
Common Packagist Risk Types
PHP/Packagist packages frequently see SQL injection and remote code execution vulnerabilities. GeekWala shows which Packagist CVEs are actively exploited.
Packagist Security Guide
How to Scan Packagist Projects
GeekWala supports the following PHP dependency files
Supported Files
composer.lock
Scan Methods
- Upload your lockfile
- Paste file contents
- Import from GitHub
What You Get
- Exploitation-ranked results (not just CVSS)
- CISA KEV: flag CVEs actively attacked right now
- EPSS: 30-day exploit probability per CVE
- Cross-ecosystem: cover your full stack in one scan
Compare & learn more
See how results are ranked by exploitation risk — KEV-flagged CVEs first, with EPSS scores.
See a live example65 Known Exploited Vulnerabilities
These vulnerabilities are actively being exploited in the wild. Scan your project to check if you're affected.
Recent Packagist Vulnerabilities
Latest security issues affecting PHP packages
Most Affected Packagist Packages
Packages with the most known vulnerabilities
Secure Your PHP Dependencies
Scan your composer.json against OSV. Results are ranked by exploitation probability — CVEs under active attack appear first, so you fix what's actually being exploited, not just what scores highest.