An extension to MediaWiki that lets you store and query structured data within wiki pages
92%
Total Score
healthy
Healthy release with active maintenance and strong project hygiene; all four workflow actions are unpinned.
The single workflow was fully analyzed with no injection, untrusted-checkout, or substantive audit findings, and it has no top-level write permissions. However, all four action references are unpinned, creating a minor reproducibility and update-integrity concern.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-85471 mediawiki/semantic-media-wiki is vulnerable to Cross-Site Scripting (XSS) in versions 2.5.0 - 7.3.0. | 2.5.0 - 7.3.0 | Medium |
AIKIDO-2026-562765 mediawiki/semantic-media-wiki is vulnerable to Cross-Site Scripting (XSS) in versions 2.5.0 - 7.3.0. | 2.5.0 - 7.3.0 | Medium |
AIKIDO-2026-336716 mediawiki/semantic-media-wiki is vulnerable to Cross-Site Scripting (XSS) in versions 5.0.0 - 7.3.0. | 5.0.0 - 7.3.0 | Medium |
AIKIDO-2026-817621 mediawiki/semantic-media-wiki is vulnerable to Cross-Site Scripting (XSS) in versions 4.2.0 - 7.3.0. | 4.2.0 - 7.3.0 | Medium |
AIKIDO-2026-656155 mediawiki/semantic-media-wiki is vulnerable to Missing Authorization in versions 7.3.0 - 7.3.0. | 7.3.0 - 7.3.0 | Medium |
| Dependency | Last Release | Score |
|---|---|---|
wikimedia/textcat Version ^2|^1.1 | — | — |
composer/installers Version ^2.2.0|^1.0.1 | — | — |
jeroen/file-fetcher Version ^6|^5|^4.4 | — | — |
jeroen/message-reporter Version ~1.0 | — | — |
serialization/serialization Version ~4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.