Aikido Intel
Secure My Code
Package Health

october/system

System module for October CMS

Latest v1.1.12PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Are you affected? Scan for Free

Health Score Breakdown

Release historycaution

The package has 169 releases since December 2016, but its latest release was over four years ago and it had no releases in the last 12 months. That is a meaningful maintenance concern, though the long history shows prior maturity.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with the absent recent releases and raising abandonment risk.

Repo issue activitycaution

No issues or pull requests were opened, closed, or merged in the last month, while one pull request remains open. This suggests little current project activity, although the available issue counts are incomplete.

Repo popularitycaution

The repository has 13 stars and 11 forks, indicating a small user base. This is supporting context only and does not outweigh the maintenance evidence.

Repo toolingcaution

Composer is used as a build tool, which supports reproducible project handling, but no repository security scanning tools were detected.

Vulnerabilities

TitleVersionsSeverity
CVE-2026-49400
october/system is vulnerable to Deserialization of Untrusted Data in versions 0.0.0 - 3.7.17 and 4.0.0 - 4.2.23.
0.0.0 - 3.7.174.0.0 - 4.2.23
Low
CVE-2026-46696
october/system is vulnerable to Improper Privilege Management in versions 0.0.0 - 3.7.17 and 4.0.0 - 4.2.23.
0.0.0 - 3.7.174.0.0 - 4.2.23
Low
CVE-2026-29179
october/system is vulnerable to Incorrect Authorization in versions 4.0.0 - 4.1.16 and 0.0.0 - 3.7.16.
0.0.0 - 3.7.164.0.0 - 4.1.16
Low
CVE-2026-27937
october/system is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 3.7.16 and 4.0.0 - 4.1.16.
0.0.0 - 3.7.164.0.0 - 4.1.16
Low
CVE-2026-26067
october/system is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.0.0 - 3.7.14 and 4.0.0 - 4.1.10.
0.0.0 - 3.7.144.0.0 - 4.1.10
Medium

Package versions

Maintainers

Alexey Bobkov
Samuel Georges

Direct Dependencies

DependencyLast ReleaseScore
composer/installers
Version ~1.0
—
—

Weekly Downloads

Info

Last Published
4 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Scan for Free
Book a Demo

Free. No credit card required.

Aikido Platform
Subscribe
Stay up to date with all updates

I consent to receiving marketing communications based on Aikido’s Privacy Policy.

LinkedIn YouTube X
© 2026 Aikido Security BV | BE0792914919
Ghent, Belgium | San Francisco, US
SOC 2SOC 2Compliant
ISO 27001ISO 27001Compliant
ISO 42001ISO 42001Compliant
FedRAMPFedRAMPImplementing

© All Intel data is openly available and commercially licensed.