enhavo
43%
Total Score
50
100
71
50
The latest release was in May 2019, over seven years ago, and there have been no releases in the last 12 months. This is strong evidence of abandonment risk despite the package not being deprecated.
The repository recorded zero commits and zero active maintainers in the last three months. Although it was pushed in March 2024, current activity is insufficient to offset the long release gap.
Composer build tooling is present, but no security scanning tools were detected. That weakens ongoing supply-chain oversight without proving the package is unsafe.
The linked repository has no security policy. This reduces transparency around vulnerability reporting and handling, though the organization-backed repository and other project documentation provide some compensation.
The latest version is v0.7 rather than a stable major release, which suggests limited maturity. It is not marked as a prerelease, so this is a modest concern rather than a severe one.
| Title | Versions | Severity |
|---|---|---|
CVE-2024-25876 enhavo/enhavo-app is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 0.13.1. | 0.0.0 - 0.13.1 | Medium |
CVE-2024-25875 enhavo/enhavo-app is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 0.13.1. | 0.0.0 - 0.13.1 | Medium |
CVE-2024-25874 enhavo/enhavo-app is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 0.13.1. | 0.0.0 - 0.13.1 | Medium |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
enhavo/enhavo Version 0.7.x-dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.