risk 40/100 · moderate

Packagist · ci4-cms-erp/ci4ms

36 known advisories.

Risk score: 40/100

Transparent, additive — every input shown:

Worst severity: +40
Worst CVSS: +0
Exploited in the wild: +0
Exploit probability (EPSS): +0

Advisories

CVE-2026-41203 — critical
CVE-2026-41202 — critical
CVE-2026-35035 — critical
CVE-2026-34989 — critical
CVE-2026-34571 — critical
CVE-2026-34569 — critical
CVE-2026-34568 — critical
CVE-2026-34567 — critical
CVE-2026-34566 — critical
CVE-2026-34565 — critical
CVE-2026-34564 — critical
CVE-2026-34563 — critical
CVE-2026-34561 — critical
CVE-2026-34560 — critical
CVE-2026-34559 — critical
CVE-2026-34557 — critical
CVE-2026-34558 — critical
CVE-2026-27599 — critical
CVE-2026-25510 — critical
CVE-2026-45270 — high
CVE-2026-41587 — high
CVE-2026-39394 — high
CVE-2026-39393 — high
CVE-2026-34572 — high
CVE-2026-34570 — high
CVE-2026-45139 — medium
CVE-2026-45138 — medium
CVE-2026-41891 — medium
CVE-2026-41890 — medium
CVE-2026-41201 — medium
CVE-2026-39392 — medium
CVE-2026-39391 — medium
CVE-2026-39390 — medium
CVE-2026-39389 — medium
CVE-2026-34562 — medium
CVE-2026-25509 — medium

Stateward checks every dependency on every pull request and flags ci4-cms-erp/ci4ms only if your code actually reaches the vulnerable path.

Scan my repo

Sources: CISA KEV (public domain), OSV.dev & GitHub Advisory Database (CC-BY-4.0), FIRST EPSS, NVD/CWE (public domain). Served live from the Stateward advisory database.