Packagist unopim/unopim

Name: Packagist unopim/unopim
Brand: Packagist

productUS

pkg:composer/unopim/unopim

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical2high3medium0low

updated 2026-10-28

vulnerabilities (7)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-55745US	high8.8	0.63% (50th)	—	0.3.1	2025-08-22	< 0.3.1
CVE-2025-55743US	high8.8	0.48% (41st)	—	0.2.1	2025-08-21	< 0.2.1
CVE-2025-55741US	—OT elevated	0.44% (38th)	—	0.3.1	2025-08-22	< 0.3.1
CVE-2024-50637US	—	0.41% (35th)	—	0.1.4	2024-11-06	< 0.1.4
CVE-2025-55742US	medium4.8	0.39% (32nd)	—	0.2.1	2025-08-21	< 0.2.1
CVE-2024-52305US	medium4.8	0.20% (9th)	—	0.1.5	2024-11-13	< 0.1.5
CVE-2025-55744US	medium4.3	0.15% (4th)	—	0.2.1	2025-08-21	< 0.2.1

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-1236Improper Neutralization of Formula Elements in a CSV File1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type1 CVEs
CWE-616Incomplete Identification of Uploaded File Variables (PHP)1 CVEs
CWE-692Incomplete Denylist to Cross-Site Scripting1 CVEs
CWE-862Missing Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.