Aimeos Admin GraphQL API extension
73%
Total Score
caution
Active releases and a matching repository support adoption, but one-contributor maintenance and a license mismatch warrant caution.
The manifest declares LGPL-3.0, while the artifact license file is detected as LGPL-2.1; the mismatch should be resolved before relying on the stated licensing terms.
One contributor made all 8 recent commits, giving the project a very low bus factor and increasing dependence on a single maintainer.
The repository recorded 8 commits in the last 3 months, showing recent activity, though all activity is concentrated in a single maintainer.
Composer is used for builds, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no documented security policy, so users lack a clear published process for reporting and handling vulnerabilities.
| Title | Versions | Severity |
|---|---|---|
CVE-2024-47173 aimeos/ai-admin-graphql is vulnerable to Privilege Context Switching Error in versions 2024.04.1 - 2024.07.2. | 2024.04.1 - 2024.07.2 | Medium |
CVE-2024-39324 aimeos/ai-admin-graphql is vulnerable to Incorrect Authorization in versions 2022.04.1 - 2022.10.10, 2023.04.1 - 2023.10.6 and 2024.04.1 - 2024.04.1. | 2022.04.1 - 2022.10.102023.04.1 - 2023.10.62024.04.1 - 2024.04.1 | Low |
CVE-2024-39323 aimeos/ai-admin-graphql is vulnerable to Incorrect Authorization in versions 2022.04.1 - 2022.10.10, 2023.04.1 - 2023.10.6 and 2024.04.1 - 2024.04.6. | 2022.04.1 - 2022.10.102023.04.1 - 2023.10.62024.04.1 - 2024.04.6 | High |
| Version | Published | Vulnerabilities |
|---|---|---|
| 2026.10.3 | 12 Oct 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 2026.10.2 | 6 Oct 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 2026.10.1 | 5 Oct 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 2026.04.3 | 4 Oct 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 2026.04.2 | 28 Sept 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 2026.04.1 | 28 Apr 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 2025.10.5 | 12 Oct 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 2025.10.4 | 4 Oct 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 2025.10.3 | 28 Sept 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 2025.10.2 | 2 Mar 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
nyholm/psr7 Version ~1.2 | — | — |
aimeos/prisma Version ~0.7 | — | — |
aimeos/aimeos-core Version 2026.10.* | — | — |
webonyx/graphql-php Version ~15.0 | — | — |
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.