Ecosyste.ms: Packages

An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

Top 3.9% on packagist.org
Top 1.4% downloads on packagist.org
Top 0.1% dependent packages on packagist.org
Top 0.3% dependent repos on packagist.org
Top 9.8% forks on packagist.org
Top 0.6% docker downloads on packagist.org

packagist.org : flarum/core

Delightfully simple forum software.

Registry - Source - Homepage - JSON
purl: pkg:composer/flarum/core
Keywords: forum, discussion
License: MIT
Latest release: 4 months ago
First release: over 8 years ago
Namespace: flarum
Dependent packages: 1,429
Dependent repositories: 1,301
Downloads: 822,173 total
Stars: 9 on GitHub
Forks: 5 on GitHub
Docker dependents: 8
Docker downloads: 758
Total Commits: 4639
Committers: 155
Average commits per author: 29.929
Development Distribution Score (DDS): 0.603
More commit stats: commits.ecosyste.ms
See more repository details: repos.ecosyste.ms
Funding links: https://github.com/sponsors/flarum, https://opencollective.com/flarum, https://flarum.org/donate
Last synced: about 4 hours ago

Moderate

GSA_kwCzR0hTQS04Z2NnLXZ3bXctcnhqNM4AAw3a

Flarum notifications can leak restricted content
Ecosystems: packagist
Packages: flarum/core
Source: github
Published: over 1 year ago

Critical

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVxanEtNjl3Ni1mZzU3

XSS vulnerability with translator
Ecosystems: packagist
Packages: flarum/core
Source: github
Published: almost 3 years ago

Low

GSA_kwCzR0hTQS1ocGgzLWh2M2MtNzcyNc4AAw3b

Any Flarum user including unactivated can reply in public discussions whose first post was permanently deleted
Ecosystems: packagist
Packages: flarum/core
Source: github
Published: over 1 year ago

Critical

GSA_kwCzR0hTQS03eDR3LWo5OHAtODU0eM4AAv_a

Cross site scripting vulnerability with discussion titles
Ecosystems: packagist
Packages: flarum/core
Source: github
Published: over 1 year ago

Moderate

GSA_kwCzR0hTQS12aG04LXd3cmYtM2djd84AAyE1

Path Traversal Vulnerability in `LESS` Parser allows reading of sensitive server files
Ecosystems: packagist
Packages: flarum/core
Source: github
Published: about 1 year ago

High

GSA_kwCzR0hTQS02N2M2LXE0ajQtaGNjZ84AA1WM

Flarum vulnerable to LFI and Blind SSRF via Avatar upload
Ecosystems: packagist
Packages: flarum/framework, flarum/core
Source: github
Published: 9 months ago

Low

GSA_kwCzR0hTQS03MzNyLTh4Y3Atdzltcs4AA4N5

Flarum's logout Route allows open redirects
Ecosystems: packagist
Packages: flarum/framework, flarum/core
Source: github
Published: 4 months ago