Composer vrana/adminer has 9 known advisories in the phpwarden feed, 1 actively exploited. Feed 2026.10.29.2, updated 2026-10-29.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2021-21311 KEV | SSRF in adminer | high | 7.2 | <4.7.9 | 4.7.9 |
| CVE-2021-43008 | Files or Directories Accessible to External Parties in Adminer | high | 7.5 | >=1.12.0 and <4.6.3 | 4.6.3 |
| CVE-2021-29625 | XSS in doc_link | high | 7.5 | >=4.7.8 and <4.8.1 | 4.8.1 |
| CVE-2018-7667 | vrana/adminer vulnerable to SSRF by connecting to privileged ports | medium | 0.0 | <4.7.8 | 4.7.8 |
| CVE-2020-35572 | vrana/adminer via XSS in the history parameter in SQL command | medium | 6.1 | <4.7.9 | 4.7.9 |
| CVE-2026-25892 | Adminer has an Unauthenticated Persistent DoS via Array Injection in ?script=version Endpoint | high | 7.5 | >=4.6.2 and <5.4.2 | 5.4.2 |
| CVE-2025-43960 | Adminer PHP Object Injection issue leads to Denial of Service | high | 8.6 | <=4.8.1 | – |
| GHSA-97h7-mf38-g9mf | Adminer file disclosure vulnerability | high | 7.5 | >=4.3.1 and <4.6.3 | 4.6.3 |
| 2019-01-20 | Adminer script versions up to 4.6.2 contains file disclosure vulnerability | unknown | 0.0 | <4.6.3 | 4.6.3 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# PHP projects (recommended) composer require --dev phpwarden/phpwarden # then vendor/bin/phpwarden deps composer.lock # or, without Composer pipx install phpwarden && phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked