Composer billz/raspap-webgui has 10 known advisories in the phpwarden feed. Feed 2026.10.28.3, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2022-39986 | RaspAP Command Injection vulnerability | critical | 9.8 | >=2.8.0 and <2.8.8 | 2.8.8 |
| CVE-2022-39987 | RaspAP Command Injection vulnerability | high | 8.8 | >=2.8.0 and <2.9.5 | 2.9.5 |
| CVE-2021-38556 | Command Injection in RaspAP 2.6.6 | high | 8.8 | <=2.6.6 | – |
| CVE-2023-30260 | RaspAP raspap-webgui Command Injection vulnerability | high | 8.8 | <2.8.9 | 2.8.9 |
| CVE-2021-38557 | raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions. | high | 8.8 | <=2.6.6 | – |
| CVE-2026-24788 | RaspAP raspap-webgui contains an OS Command Injection vulnerability | high | 8.8 | <3.3.6 | 3.3.6 |
| CVE-2024-2497 | RaspAP Vulnerable to Code Injection via an Unknown Process in File `includes/provider.php` | medium | 4.7 | <=3.0.9 | – |
| CVE-2024-28754 | raspap-webgui vulnerable to denial of service | high | 7.5 | <3.1.0 | 3.1.0 |
| CVE-2024-41637 | RaspAP allows an attacker to escalate privileges | critical | 9.9 | <=3.1.4 | – |
| CVE-2025-44163 | raspap-webgui has a Directory Traversal vulnerability | high | 0.0 | <3.3.6 | 3.3.6 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked