craftcms/webhooks
Clear licensing, no install-time scripts, and three active contributors reduce adoption friction. Workflow references are unpinned, but the audit found no dangerous triggers, secrets exposure, or other flagged workflow findings.
88%
Total Score
100
100
94
83
Health Score Breakdown
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest security-process gap.
All three workflows were analyzed with no dangerous triggers, injection findings, or audit findings. All three action references are unpinned, which is a minor reproducibility and supply-chain hygiene gap.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2026-32261 craftcms/webhooks is vulnerable to Improper Neutralization of Special Elements Used in a Template Engine in versions 3.0.0 - 3.2.0. | 3.0.0 - 3.2.0 | High |
AIKIDO-2026-10231 craftcms/webhooks is vulnerable to Remoto Code Execution (RCE) in versions 0.1.0 - 3.1.1. | 0.1.0 - 3.1.1 | High |
Package versions
Maintainers
 Pixel & Tonic |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 craftcms/cms Version ^4.17.0|^5.9.0 | — | — |
craftcms/url-validator Version ^1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.