Composer tcg/voyager has 5 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2024-55416 | DevDojo Voyager vulnerable to reflected Cross-site Scripting | low | 0.0 | <=1.8.0 | – |
| CVE-2024-55415 | DevDojo Voyager vulnerable to path traversal | high | 0.0 | <=1.8.0 | – |
| CVE-2024-55417 | DevDojo Voyager Arbitrary File Write | medium | 4.3 | <=1.8.0 | – |
| CVE-2020-36070 | Remote code execution in Voyager | critical | 9.8 | <=1.4.0 | – |
| CVE-2025-32931 | DevDojo Voyager Argument Injection vulnerability | critical | 9.1 | >=1.4.0 and <=1.8.0 | – |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked