PatchClock

PHP security digest · Packages

Composer packages with security advisories

126 packages with advisories since September 2026, most recently affected first. Open one for all its advisories and the versions that fix them.

Package Advisories Serious
drupal/cloud 23 Sep 2026 2 –
drupal/webform 23 Sep 2026 20 –
solspace/craft-freeform 23 Sep 2026 1 –
wp-graphql/wp-graphql 23 Sep 2026 1 –
paymenter/paymenter 18 Sep 2026 1 –
mediawiki/semantic-media-wiki 18 Sep 2026 9 2
getgrav/grav 17 Sep 2026 22 13
cakephp/database 17 Sep 2026 2 2
cakephp/cakephp 17 Sep 2026 3 3
chamilo/chamilo-lms 17 Sep 2026 1 1
october/october 14 Sep 2026 1 –
october/system 14 Sep 2026 2 –
shopper/framework 11 Sep 2026 7 4
pimcore/pimcore 10 Sep 2026 1 1
drupal/ultimate_table_field 9 Sep 2026 1 –
drupal/term_glossary 9 Sep 2026 1 –
drupal/miniorange_saml 9 Sep 2026 11 –
drupal/safedelete 9 Sep 2026 1 –
drupal/key_auth 9 Sep 2026 1 –
drupal/feed_block 9 Sep 2026 1 –
drupal/csp_log 9 Sep 2026 1 –
drupal/cas_server 9 Sep 2026 1 –
drupal/ai_provider_amazeeio 9 Sep 2026 1 –
phpseclib/phpseclib 8 Sep 2026 1 –
predis/predis 8 Sep 2026 1 1
maatwebsite/excel 8 Sep 2026 1 1