lavalite/cms
Lavalite - The Laravel CMS.
42%
Total Score
67
83
50
Health Score Breakdown
The package has 57 releases, but none in the last 12 months and its latest release was nearly three years ago, indicating a prolonged maintenance pause.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the nearly three-year release pause and creating substantial abandonment risk.
There are 202 open issues and no issues or pull requests were closed in the last month, consistent with a project that is not actively responding to users.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
The linked repository is not archived, but its last push was nearly three years ago, so the non-archived status does not offset the maintenance concern.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2025-71177 lavalite/cms is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 10.1.0. | 0.0.0 - 10.1.0 | Medium |
CVE-2024-31828 lavalite/cms is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 10.1.0 - 10.1.0. | 10.1.0 - 10.1.0 | Medium |
CVE-2023-30124 lavalite/cms is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 9.0.0. | 0.0.0 - 9.0.0 | Medium |
CVE-2023-27237 lavalite/cms is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 9.0.0. | 0.0.0 - 9.0.0 | Medium |
CVE-2023-27238 lavalite/cms is vulnerable to Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in versions 0.0.0 - 9.0.0. | 0.0.0 - 9.0.0 | Critical |
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/ui Version ^4.2 | — | — |
litecms/page Version ^10.1 | — | — |
litecms/block Version ^10.1 | — | — |
laravel/tinker Version ^2.8 | — | — |
league/fractal Version ^0.20.1 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.