Every CVE phpwarden knows about across the PHP engine, Composer packages and WordPress plugins, themes and core — ranked by real-world exploitation. Feed 2026.10.29.1, updated 2026-10-28. Browse by package.
| CVE | Package | Title | Severity | CVSS | EPSS |
|---|---|---|---|---|---|
| CVE-2019-18854 | safe-svg (WordPress plugin) | A Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin through 1.9.4 for WordPress, related to unlimited recursion f | high | 7.5 | 3% |
| CVE-2021-21359 | typo3/cms, typo3/cms-core | Denial of Service in Page Error Handling | medium | 5.9 | 2% |
| CVE-2023-50251 | phenx/php-svg-lib | Denial of service caused by infinite recursion when parsing SVG document | medium | 5.3 | 1% |
| CVE-2023-34620 | laktak/hjson | hjson stack exhaustion vulnerability | high | 7.5 | 1% |
| CVE-2024-29904 | codeigniter4/framework | CodeIgniter4 DoS Vulnerability | high | 7.5 | 1% |
| CVE-2021-36395 | moodle/moodle | Moodle vulnerable to Uncontrolled Resource Consumption | high | 7.5 | 1% |
| CVE-2022-23500 | typo3/cms, typo3/cms-core | TYPO3 CMS vulnerable to Denial of Service in Page Error Handling | medium | 5.9 | 1% |
| CVE-2026-45133 | symfony/symfony, symfony/yaml | Symfony hardened the parser when handling untrusted input | low | 0.0 | 1% |
| CVE-2026-107376 | webonyx/graphql-php | webonyx/graphql-php has unbounded recursion in parser that causes stack overflow on crafted nested input | high | 8.2 | 0% |
| CVE-2026-109413 | symfony/symfony, symfony/yaml | Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process | high | 0.0 | 0% |